Bring Your Own
Device
Tools
Demo
Maak een Windows to Go stick
User Environment
Virtualization
Demo
User Environment Virtualization
User Account
Control
• The Administrator
• The account named ‘administrator’
• An Administrator
• Your name with administrator privileges
• Protected Administrator
• AKA: ‘Administrator in Admin Approval Mode’
• Standard User
• Your name without administrator privileges
Administrators
Backup Operators
Power Users
Network Configuration Operators
Group Policy Creator Owners
Schema Admins
Enterprise Admins
Denied RODC Password Replication Group
Create a token object
Act as part of the operating system
Take ownership of files and other objects
Load and unload device drivers
Back up files and directories
Restore files and directories
Impersonate a client after authentication
Modify an object label
Debug programs
Demo
Analyse van het User Access Token
Services
System
Administrators
Standard Users
High
IE Protected
Mode
Medium
(Default)
Low
Integrity level: High
(Elevated Token)
Integrity level: Medium
Demo
Integrity Levels
•
•
•
•
•
•
•
•
•
documentLibrary
musicLibrary
videoLibrary
picturesLibrary
microphone
Webcam
removableStorage
Location
Proximity
•
•
•
•
•
•
internetClient
internetClientServer
textMessaging
privateNetworkClient
privateNetworkClientServer
certificates
Demo
Enhanced Protected Mode
Samenvatting
Form factors
Metro Interface
Security
Apps
Services
Infra
File
Svc
PKI
AD
Deploy
Print
Svc
Mail
H
D
e
n
c
r
Unified
Comms
Remote
Deskto
p
Layered apps
Office
Profile
Mgt
Config
Middle
ware
AppV
Busi
ness
apps
SCCM
Intranet
AV
Mgt
Internet
Access
Werkplek
Base
apps
AV
Client Operating System (Windows 8)
Mgt
Agents
IE
Drivers
Hardware
LAN
Wifi
Remote
Access
3G
F
i
r
e
w
a
ll