Missing Groups and ACE's
1. Where is the Creator Owner ACE? I had heard that Vista would contain a new Creator Owner ACE, so that admins could take away automatic Full Control permissions for owners on the objects that they created. May have something to do with the Owner Access Restriction (OAR) feature as well. 2. Where is the TrustedInstaller group? I see it is the owner of all installed files in Windows, but I can't see how I can add my user account to it to become a trusted installer. 3. Is the Restricted User user/SID that is in XP gone in Vista?
August 1st, 2006 3:00pm

Hi All, Even we want to know how we can add an user to TrustedInstaller group which is not available in Users and Groups settings. Please explain us about the TrustedInstaller group where can we find. Thanks in advance....
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2006 6:13pm

You cannot add yourself to the Trusted Installer group. The system trusts itself more than it trusts any administrator. The concept of the Trusted Installer is integral to the Windows Resource Protection scheme, which is mentioned here: http://www.microsoft.com/technet/windowsvista/evaluate/feat/mngfeat.mspx, although it seems we need to get some more public information out about it.
August 7th, 2006 7:47pm

How about answers to the other two questions? Also, can you point me to the best link on the TrustedInstaller? What it is? How it is used, etc.?
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2006 9:24pm

I just tested this and you can indeed change the permissions for the Creator Owner on the security tab of the drive properties and it does work to limit the Creator Owner. It does not change the properties of key folders like Windows or Program Files, but works fine for anything that the user creates out of thier own profile. There is probably a way to change even the protected folders, but it may be a bit too restrictive to be of use.
August 7th, 2006 10:41pm

TrustedInstaller appears as a group on the security tab, but if you look on the service tab in tasl manager you will see that this is actually a service. You can not add or modify TrustedInstalleras far as I can tell.
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2006 10:51pm

Did you modify the Creator Owner group or the ACE? The Creator Owner group and user has been around forever, it's the Creator Owner ACE that was supposed to be new.
August 7th, 2006 11:39pm

What is the tasl manager?
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2006 11:40pm

Roger A. Grimes wrote:What is the tasl manager?A typo for "task manager"?
August 9th, 2006 12:35am

The keyboard and I are not very good friends. I did mean Task Manager.
Free Windows Admin Tool Kit Click here and download it now
August 15th, 2006 6:47pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics