Managing privilege delegation on a computer device
AssigneeAvecto Limited
InventorsJohn Goodridge, Georgina Shippey
Life of this patent
Estimating the term…
Abstract
A computing device is disclosed with an agent and operating system executing thereon. The agent can determine that a user account control service is disabled by querying the operating system. In response to determining that the user account control service is disabled, the agent can hook a query provided by the operating system. The agent can receive a request to confirm whether the user account control service is enabled using the query provided by the operating system. The agent can generate a confirmation that the user account control service is enabled. The agent can determine whether to execute a process by performing a privilege check as if the user account control service were enabled based on the confirmation.
Claims20
A system, comprising:
- a processing circuit;
- an operating system;
- a user account control service cooperating with the operating system;
- and
- an agent cooperating with the operating system;
- wherein the agent is configured to:
- determine that the user account control service is disabled by querying the operating system;
- in response to determining that the user account control service is disabled, hook a query provided by the operating system;
- receive, via the query provided by the operating system, a request to confirm whether the user account control service is enabled;
- generate, via the query provided by the operating system, a confirmation that the user account control service is enabled;
- and
- cause the operating system to perform a privilege check as if the user account control service is enabled based on the confirmation.
A method, comprising:
- determining, via an agent in cooperation with an operating system, that a user account control service is disabled by querying the operating system;
- in response to determining that the user account control service is disabled, hooking, via the agent, a query provided by the operating system;
- receiving, via the query provided by the operating system, a request to confirm whether the user account control service is enabled;
- generating, via the agent responsive to the query, a confirmation that the user account control service is enabled;
- and
- cause, via the agent, the operating system to perform a privilege check as if the user account control service were enabled based on the confirmation.
A non-transitory computer-readable medium embodying a program that, when executed by at least one computing device, causes the at least one computing device to:
- determine, via an agent in cooperation with an operating system, that a user account control service is disabled by querying the operating system;
- in response to determining that the user account control service is disabled, hook, via the agent, a query provided by the operating system;
- receive, via the query provided by the operating system, a request to confirm whether the user account control service is enabled;
- generate, via the agent responsive to the query, a confirmation that the user account control service is enabled;
- and
- determine, via the agent, whether to execute a process by performing a privilege check as if the user account control service were enabled based on the confirmation.
Dependencies are inferred from the claim text.