Restrict Access to Base System Objects (Windows NT/2000/XP)

Registry Guide for Windows
Part of the WinGuides Network

Registry tweaks, tricks & hacks to optimize, enhance and secure Microsoft Windows.

Restrict Access to Base System Objects (Windows NT/2000/XP)
Category: Home > Security > System

This tweak can be easily applied using WinGuides Tweak Manager.
Download a free trial now!

In Windows the core operating system libraries are kept in virtual memory and shared between the programs running on the system. This has exposed a vulnerability that could allow a user to gain administrative privileges on the computer the user is interactively logged onto.

To enable stronger protection on system base objects such as the KnownDLLs list, change the value of 'ProtectionMode' to equal '1' in the registry key below.


(Default)	REG_SZ	(value not set)
ProtectionMode	REG_DWORD	0x00000001 (1)


	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager

Settings:

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
Name: ProtectionMode
Type: REG_DWORD (DWORD Value)
Value: (0 = disabled, 1 = enabled)

Disclaimer: Modifying the registry can cause serious problems that may require you to reinstall your operating system. We cannot guarantee that problems resulting from modifications to the registry can be solved. Use the information provided at your own risk.

Last Modified: April 3, 2002

Return to Index