Infosys Microsoft Alliance and Solutions blog

« Microsoft Vista: Best Practices recommendation for Zero Touch Deployment using SMS and BDD-II | Main | Roaming Profiles Implementation for SoftGrid-II »

Addressing User Security Elevation on a locked down PC using SoftGrid Virtualized Applications

Normally in a locked down environemnt in order to enable End Users (EU) to customize application specific settings and other customizations application packagers identify and elevate security permissions to secure NTFS and Registry areas. This is often considered as a security risk and also contributes to effort in troublershooting and identifying such areas on the local system.

SoftGrid eliminates the requirement of elevating security permissions to the restricted area. As Softgrid virtualized applications execute within a virtual environement the user has complete access to the virtual environemnt while executing the application. The advantage is that the users have access to the desired functionality withoutaffecting the state of the host system.

In order to test this feature of Softgrid, I chose Winzip trial version installation.

Test 1: A native install of WinZip was carried out on the local host system by logging in as administrator. After the installation, the WinZip application was accessed using a standard User Account (lock down). The result was as anticipated, no rights to change settings as shown below:

 

Figure 1: Application locally installed by the administrator and accessed by the users in locked down state
Test 2:

The WinZip application was then Sequenced using Softgrid and then ported to the SoftGrid Client on the same machine. This time when the virtualized shortcut was launched by the sane standard User the results were completely different. Standard User had full access to application specific options available as shown in the Figure below:

winzip after sequencing

Figure 2: Application sequenced and deployed on to the SoftGrid Client machine. Accessed by the users on the SoftGrid Client machine

 

Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  
Conclusion:Applications if virtualized using Softgrid can be tested using an administrative account during native installation testing.  

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

Please key in the two words you see in the box to validate your identity as an authentic user and reduce spam.

Subscribe to this blog's feed

Follow us on

Blogger Profiles

Infosys on Twitter