Reading Notebook: 25-May-10
Comments in italics are mine and express my own views, thoughts and opinions
Windows Internals by M. Russinovich, D. Solomon and A. Ionescu:
No share access for impersonation: we need logon (p. 481)
S(ecure)QOS levels, SECURITY_CONTEXT_TRACKING (p. 482)
Integrity Level (client) <= Integrity Level (server) (pp. 482 - 483)
Restricted tokens -> filtered admin tokens (logon as admin with UAC) (pp. 483 - 484)
Callback, allowed(denied)-object (GUID-based for AD) ACEs (p. 487)
No DACL: full access, empty DACL: no access (p. 487)
System audit-object ACEs (p. 488)