How to replace inbox driver in Vista?

TheMSsForum.com: The Microsoft Software Forum

I would replace free build acpi.sys with checked build acpi.sys in Vista.
I always get access denied error.
How should I do to replace inbox driver in Vista?

Best Regards
Jack Huang
Top

Re: How to replace inbox driver in Vista? by Norman

Norman
Wed Mar 12 19:31:41 CDT 2008

Make a BAT file containing a COPY command, and use the AT command to execute
the BAT file in the Local System account?

(I haven't tried it. Please say if it works ^_^)


"Jack Huang" <huangjj@hotmail.com> wrote in message
news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>I would replace free build acpi.sys with checked build acpi.sys in Vista.
> I always get access denied error.
> How should I do to replace inbox driver in Vista?
>
> Best Regards
> Jack Huang
>

Top

Re: How to replace inbox driver in Vista? by Ivan

Ivan
Thu Mar 13 03:19:11 CDT 2008

I doubt that will work.
System files are owned by the TrustedInstaller account.

I would try something like:

takeown.exe /F <file> /A
icacls.exe <file> /grant afministrators:F

before trying to copy any file.
--

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


"Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
> Make a BAT file containing a COPY command, and use the AT command to
> execute the BAT file in the Local System account?
>
> (I haven't tried it. Please say if it works ^_^)
>
>
> "Jack Huang" <huangjj@hotmail.com> wrote in message
> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>I would replace free build acpi.sys with checked build acpi.sys in Vista.
>> I always get access denied error.
>> How should I do to replace inbox driver in Vista?
>>
>> Best Regards
>> Jack Huang
>>
>


Top

Re: How to replace inbox driver in Vista? by Maxim

Maxim
Thu Mar 13 05:48:34 CDT 2008

..\CurrentControlSet\Services\ACPI

set ImagePath to your file pathname (the file must be in
..\system32\drivers though).

This bypasses the ACL for acpi.sys file and also the System File
Protection.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com

"Jack Huang" <huangjj@hotmail.com> wrote in message
news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
> I would replace free build acpi.sys with checked build acpi.sys in Vista.
> I always get access denied error.
> How should I do to replace inbox driver in Vista?
>
> Best Regards
> Jack Huang
>
>

Top

Re: How to replace inbox driver in Vista? by Bill

Bill
Thu Mar 13 09:57:12 CDT 2008

I believe they closed this "at" hole on Vista. I don't believe you can use
the /interactive flag with "at" anymore on Vista and without that I don't
believe a copy would work.

Also, it wouldn't help with native drivers anyway. Native drivers are not
modifiable by the system account either.

You are pretty much screwed AFAIK. I was working with Microsoft before
Vista RTM on some native replacement drivers and the only way we could
replace system drivers was with binaries signed using a Microsoft cert,
which of course we didn't have direct access to. Without that cert (and
test certs will not suffice) I know of no way to do this. I haven't tried
Ivan's suggestion though...interesting!!

Max's solution is the quick and dirty way I always use. Just modify the
image path.

Bill M.

"Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
> Make a BAT file containing a COPY command, and use the AT command to
> execute the BAT file in the Local System account?
>
> (I haven't tried it. Please say if it works ^_^)
>
>
> "Jack Huang" <huangjj@hotmail.com> wrote in message
> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>I would replace free build acpi.sys with checked build acpi.sys in Vista.
>> I always get access denied error.
>> How should I do to replace inbox driver in Vista?
>>
>> Best Regards
>> Jack Huang
>>
>


Top

Re: How to replace inbox driver in Vista? by Norman

Norman
Thu Mar 13 18:57:04 CDT 2008

Who said anything about /interactive?

I agree that the /interactive hole was closed. That's why I didn't suggest
trying it.


"Bill McKenzie" <bkmckenzie@sbcglobal.net> wrote in message
news:O37bdpRhIHA.4152@TK2MSFTNGP02.phx.gbl...
>I believe they closed this "at" hole on Vista. I don't believe you can use
>the /interactive flag with "at" anymore on Vista and without that I don't
>believe a copy would work.
>
> Also, it wouldn't help with native drivers anyway. Native drivers are not
> modifiable by the system account either.
>
> You are pretty much screwed AFAIK. I was working with Microsoft before
> Vista RTM on some native replacement drivers and the only way we could
> replace system drivers was with binaries signed using a Microsoft cert,
> which of course we didn't have direct access to. Without that cert (and
> test certs will not suffice) I know of no way to do this. I haven't tried
> Ivan's suggestion though...interesting!!
>
> Max's solution is the quick and dirty way I always use. Just modify the
> image path.
>
> Bill M.
>
> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
> news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
>> Make a BAT file containing a COPY command, and use the AT command to
>> execute the BAT file in the Local System account?
>>
>> (I haven't tried it. Please say if it works ^_^)
>>
>>
>> "Jack Huang" <huangjj@hotmail.com> wrote in message
>> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>>I would replace free build acpi.sys with checked build acpi.sys in Vista.
>>> I always get access denied error.
>>> How should I do to replace inbox driver in Vista?
>>>
>>> Best Regards
>>> Jack Huang
>>>
>>
>
>

Top

Re: How to replace inbox driver in Vista? by Norman

Norman
Thu Mar 13 18:56:14 CDT 2008

Then use the AT command to run the BAT file under the TrustedInstaller
account?

The SYSTEM account has privileges to operate as part of the operating
system, right? Is it really possible that the TrustedInstaller account has
privileges to copy files that the operating system can't?


"Ivan Brugiolo [MSFT]" <ivanbrug@online.microsoft.com> wrote in message
news:OJuvsLOhIHA.4712@TK2MSFTNGP04.phx.gbl...
>I doubt that will work.
> System files are owned by the TrustedInstaller account.
>
> I would try something like:
>
> takeown.exe /F <file> /A
> icacls.exe <file> /grant afministrators:F
>
> before trying to copy any file.
> --
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Use of any included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
>
>
> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
> news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
>> Make a BAT file containing a COPY command, and use the AT command to
>> execute the BAT file in the Local System account?
>>
>> (I haven't tried it. Please say if it works ^_^)
>>
>>
>> "Jack Huang" <huangjj@hotmail.com> wrote in message
>> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>>I would replace free build acpi.sys with checked build acpi.sys in Vista.
>>> I always get access denied error.
>>> How should I do to replace inbox driver in Vista?
>>>
>>> Best Regards
>>> Jack Huang
>>>
>>
>
>

Top

Re: How to replace inbox driver in Vista? by Bill

Bill
Fri Mar 14 00:19:50 CDT 2008

>Then use the AT command to run the BAT file under the TrustedInstaller
>account?

How would you do that?

> The SYSTEM account has privileges to operate as part of the operating
> system, right? Is it really possible that the TrustedInstaller account
> has privileges to copy files that the operating system can't?

Welcome to Vista!

"Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
news:uCn9yXWhIHA.3648@TK2MSFTNGP06.phx.gbl...
> Then use the AT command to run the BAT file under the TrustedInstaller
> account?
>
> The SYSTEM account has privileges to operate as part of the operating
> system, right? Is it really possible that the TrustedInstaller account
> has privileges to copy files that the operating system can't?
>
>
> "Ivan Brugiolo [MSFT]" <ivanbrug@online.microsoft.com> wrote in message
> news:OJuvsLOhIHA.4712@TK2MSFTNGP04.phx.gbl...
>>I doubt that will work.
>> System files are owned by the TrustedInstaller account.
>>
>> I would try something like:
>>
>> takeown.exe /F <file> /A
>> icacls.exe <file> /grant afministrators:F
>>
>> before trying to copy any file.
>> --
>>
>> --
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> Use of any included script samples are subject to the terms specified at
>> http://www.microsoft.com/info/cpyright.htm
>>
>>
>> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
>> news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
>>> Make a BAT file containing a COPY command, and use the AT command to
>>> execute the BAT file in the Local System account?
>>>
>>> (I haven't tried it. Please say if it works ^_^)
>>>
>>>
>>> "Jack Huang" <huangjj@hotmail.com> wrote in message
>>> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>>>I would replace free build acpi.sys with checked build acpi.sys in
>>>>Vista.
>>>> I always get access denied error.
>>>> How should I do to replace inbox driver in Vista?
>>>>
>>>> Best Regards
>>>> Jack Huang
>>>>
>>>
>>
>>
>


Top

Re: How to replace inbox driver in Vista? by Bill

Bill
Fri Mar 14 00:18:54 CDT 2008

didn't think you could execute a copy without interactive, but it appears
you can.

Still doubt it will work, but don't have a Vista machine handy to test it.

"Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
news:OHDTzXWhIHA.3648@TK2MSFTNGP06.phx.gbl...
> Who said anything about /interactive?
>
> I agree that the /interactive hole was closed. That's why I didn't
> suggest trying it.
>
>
> "Bill McKenzie" <bkmckenzie@sbcglobal.net> wrote in message
> news:O37bdpRhIHA.4152@TK2MSFTNGP02.phx.gbl...
>>I believe they closed this "at" hole on Vista. I don't believe you can
>>use the /interactive flag with "at" anymore on Vista and without that I
>>don't believe a copy would work.
>>
>> Also, it wouldn't help with native drivers anyway. Native drivers are
>> not modifiable by the system account either.
>>
>> You are pretty much screwed AFAIK. I was working with Microsoft before
>> Vista RTM on some native replacement drivers and the only way we could
>> replace system drivers was with binaries signed using a Microsoft cert,
>> which of course we didn't have direct access to. Without that cert (and
>> test certs will not suffice) I know of no way to do this. I haven't
>> tried Ivan's suggestion though...interesting!!
>>
>> Max's solution is the quick and dirty way I always use. Just modify the
>> image path.
>>
>> Bill M.
>>
>> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
>> news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
>>> Make a BAT file containing a COPY command, and use the AT command to
>>> execute the BAT file in the Local System account?
>>>
>>> (I haven't tried it. Please say if it works ^_^)
>>>
>>>
>>> "Jack Huang" <huangjj@hotmail.com> wrote in message
>>> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>>>I would replace free build acpi.sys with checked build acpi.sys in
>>>>Vista.
>>>> I always get access denied error.
>>>> How should I do to replace inbox driver in Vista?
>>>>
>>>> Best Regards
>>>> Jack Huang
>>>>
>>>
>>
>>
>


Top

Re: How to replace inbox driver in Vista? by Norman

Norman
Fri Mar 14 00:58:10 CDT 2008

I'm also wondering how to get hold of the TrustedInstaller account, which is
why I made that suggestion a question.

Maybe a process running under the SYSTEM Account could CPAU to the
TrustedInstaller account. If I had lots of free time I'd try that
experiment.


"Bill McKenzie" <bkmckenzie@sbcglobal.net> wrote in message
news:O4Z3dLZhIHA.4712@TK2MSFTNGP04.phx.gbl...
> >Then use the AT command to run the BAT file under the TrustedInstaller
> >account?
>
> How would you do that?
>
>> The SYSTEM account has privileges to operate as part of the operating
>> system, right? Is it really possible that the TrustedInstaller account
>> has privileges to copy files that the operating system can't?
>
> Welcome to Vista!
>
> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
> news:uCn9yXWhIHA.3648@TK2MSFTNGP06.phx.gbl...
>> Then use the AT command to run the BAT file under the TrustedInstaller
>> account?
>>
>> The SYSTEM account has privileges to operate as part of the operating
>> system, right? Is it really possible that the TrustedInstaller account
>> has privileges to copy files that the operating system can't?
>>
>>
>> "Ivan Brugiolo [MSFT]" <ivanbrug@online.microsoft.com> wrote in message
>> news:OJuvsLOhIHA.4712@TK2MSFTNGP04.phx.gbl...
>>>I doubt that will work.
>>> System files are owned by the TrustedInstaller account.
>>>
>>> I would try something like:
>>>
>>> takeown.exe /F <file> /A
>>> icacls.exe <file> /grant afministrators:F
>>>
>>> before trying to copy any file.
>>> --
>>>
>>> --
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>> Use of any included script samples are subject to the terms specified at
>>> http://www.microsoft.com/info/cpyright.htm
>>>
>>>
>>> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
>>> news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
>>>> Make a BAT file containing a COPY command, and use the AT command to
>>>> execute the BAT file in the Local System account?
>>>>
>>>> (I haven't tried it. Please say if it works ^_^)
>>>>
>>>>
>>>> "Jack Huang" <huangjj@hotmail.com> wrote in message
>>>> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>>>>I would replace free build acpi.sys with checked build acpi.sys in
>>>>>Vista.
>>>>> I always get access denied error.
>>>>> How should I do to replace inbox driver in Vista?
>>>>>
>>>>> Best Regards
>>>>> Jack Huang
>>>>>
>>>>
>>>
>>>
>>
>
>

Top

Re: How to replace inbox driver in Vista? by Ivan

Ivan
Fri Mar 14 10:35:54 CDT 2008

The LocalSystem account is yet one other security principal.
That security principal has only read access to operative system files
and registry keys, and so do administrators.
The owner of those files is given at installation time to the
TrustedInstaller.
Please do no confuse privileges with discretionary access control.

--

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


"Bill McKenzie" <bkmckenzie@sbcglobal.net> wrote in message
news:O4Z3dLZhIHA.4712@TK2MSFTNGP04.phx.gbl...
> >Then use the AT command to run the BAT file under the TrustedInstaller
> >account?
>
> How would you do that?
>
>> The SYSTEM account has privileges to operate as part of the operating
>> system, right? Is it really possible that the TrustedInstaller account
>> has privileges to copy files that the operating system can't?
>
> Welcome to Vista!
>
> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
> news:uCn9yXWhIHA.3648@TK2MSFTNGP06.phx.gbl...
>> Then use the AT command to run the BAT file under the TrustedInstaller
>> account?
>>
>> The SYSTEM account has privileges to operate as part of the operating
>> system, right? Is it really possible that the TrustedInstaller account
>> has privileges to copy files that the operating system can't?
>>
>>
>> "Ivan Brugiolo [MSFT]" <ivanbrug@online.microsoft.com> wrote in message
>> news:OJuvsLOhIHA.4712@TK2MSFTNGP04.phx.gbl...
>>>I doubt that will work.
>>> System files are owned by the TrustedInstaller account.
>>>
>>> I would try something like:
>>>
>>> takeown.exe /F <file> /A
>>> icacls.exe <file> /grant afministrators:F
>>>
>>> before trying to copy any file.
>>> --
>>>
>>> --
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>> Use of any included script samples are subject to the terms specified at
>>> http://www.microsoft.com/info/cpyright.htm
>>>
>>>
>>> "Norman Diamond" <ndiamond@newsgroup.nospam> wrote in message
>>> news:uXDugGKhIHA.4152@TK2MSFTNGP02.phx.gbl...
>>>> Make a BAT file containing a COPY command, and use the AT command to
>>>> execute the BAT file in the Local System account?
>>>>
>>>> (I haven't tried it. Please say if it works ^_^)
>>>>
>>>>
>>>> "Jack Huang" <huangjj@hotmail.com> wrote in message
>>>> news:ubEDJrFhIHA.536@TK2MSFTNGP06.phx.gbl...
>>>>>I would replace free build acpi.sys with checked build acpi.sys in
>>>>>Vista.
>>>>> I always get access denied error.
>>>>> How should I do to replace inbox driver in Vista?
>>>>>
>>>>> Best Regards
>>>>> Jack Huang
>>>>>
>>>>
>>>
>>>
>>
>
>


Top