Software Deployment

Has anyone been able to get a kernal service driver to install and start and not require a reboot?
Think this could be done depending on how/when the driver is loaded.

Has anyone got the Lockpermissions table code that set permissions to inherited? I had it and lost it and need it now.
Are you sure you have manage to include inherited permissions? ;)
Don't think this is possible by using the Lockpermissions table by it self.

ORIGINAL: AngelD

Has anyone been able to get a kernal service driver to install and start and not require a reboot?
Think this could be done depending on how/when the driver is loaded.

Has anyone got the Lockpermissions table code that set permissions to inherited? I had it and lost it and need it now.
Are you sure you have manage to include inherited permissions? ;)
Don't think this is possible by using the Lockpermissions table by it self.


Hi AngelD,

I had a number that you could place in the LockPermissions Table to actually Add a permission. It was something like -35XXXXXXX or whatever but I had a PC crash here at home and lost it.

I did post it here ages ago...so I was just hoping someone had it.

The kernal service is an old issue....you need a reboot in 99.9% of cases.

Hi Jim,

Sorry but can't help you there. Have never heard of using the LockPermissions table to add permissions. I tried to search for your post but didn't find anything about that, I'm sure you did try that too. Maybe Bob could help out to find from an old backup or something if it has been removed from the forum.

The only thing I found from your post:s was not to use the table due to inheritance problem.

Hope you'll find it, would be great to have that kind of function without using any 3:rd party solution or be dependent on secedit.


Cheers!

Nothing has been removed/archived, but the default is to show only the last "n" number of days when you browse a forum. You can change this using the drop-down item "Display topics from the last [30 days]", but your best bet is to do a search of the forum for LockPermissions... try clicking here.

The LockPermissions table has always been a sore subject with me. It has never worked right all of the time. It only works correctly on some of the machines, some of the time. My preferred method in most environments is to use a security template is conjunction with secedit to apply necessary permissions.

The kernel mode driver issue is another topic altogether. Kernel mode drivers are generally loaded with the kernel. As such, the only way to properly load a kernel mode driver is to restart the kernel. In the Windows OS, there isn't really a way to do that without shutting the machine down. Any attempt to inject a driver in to the kernel will most likely be seen as an invasive action and blocked since kernel mode drivers / services have pretty much unrestricted access to the computer.