© Copyright 2009 Microsoft Corporation. Alle Rechte vorbehalten.
MSDN Webcasts: http://www.msdn-online.de/webcasts
© Copyright 2009 Microsoft Corporation. Alle Rechte vorbehalten.
MSDN Webcasts: http://www.msdn-online.de/webcasts
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Session 0
Window Station
Desktop
Services
1st User’s
Window
1st User’s
Window
1st User’s
Window
Screen Saver
Login
Shatter Attack
Session 0
Session 1
Window Station
Desktop
Window Station
Desktop
Service
1st User’s
Window
Service
1st User’s
Window
1st User’s
Window
Screen Saver
Login
Secure
Allowed
• Run most
applications
• Change per user
settings
Not Allowed
• Install applications
• Change system
components
• Change per
machine settings
• Admin “privileges”
Abby
Admin Token
Admin Token
Admin Token
“Standard User” Token
Standard User
Token
App
Child App
Standard User
Token Standard User
Token
App
Child App
Reparented
ShellExecute(elevatedapp.exe)
explorer.exe
RPC
CreateProcessAsUser(elevatedapp.exe)
AppInfo Service
elevatedapp.exe
consent.exe
Protected
Administrator
System
Administrator
•
•
•
•
•
•
•
•
•
•
•
•
Import
Function
Export
Function
Application
Windows
Shim DLL
•
•
•
asInvoker
Launch with the same token as the parent
process
highestAvailable
Launch with the highest token this user
possesses
requireAdministrator
Highest token of the User provided User is a
member of Administrators group
Three inputs
DACL: Descriptor:
Security
• Users:
Object Read
Owner
• Admins:
Discretionary
Full Ctrl
ACL
Access Token:
“Toby”
• Who I am
Groups:
• Groups
• Users
• Privileges
RequestAccess:
Access:
Request
Read Read
+ Write
Read
"Who am I" – based solely on Identity
Request Access:
Internet
Explorer +
3rd party
add-ons
Read + Write
Toby’s
Startup
folder
Request Access:
MS Money
R+W
Read + Write
R+W
Level
Typical process
System
Services
High
Elevated user apps
Medium
Normal user apps – default
Low
IE Protected Mode
"Who am I" – Identity + trust level
Request Access:
Internet
Explorer
[LOW IL]
Read + Write
Request Access:
MS Money
[Medium IL]
Read + Write
Toby’s
Startup
Folder
Medium (NW)
R+W
Program 2
Program 1
FindWindow
HWND “Calculator”
00040650
SendMessage
00040650
WM_COMMAND/BM_CLICK
Window
Manager
Many Activities in the Background
Performance
Reliability
• Responsiveness
• Consumes resources
• Boot, Shutdown,
Logoff, etc.
• Memory leaks
• System crashes & hangs
• Dependent application
crashes
Security
Power consumption
• Greater Attach Surface
• System privileges
• Successful attack may
compromise entire
system
• Extra disk, CPU
utilization
• Decrease in battery life
• Prevents idle
efficiencies
Monitor Max
Resolution
% Set to
Maximum
1280X1024
1400X1050
1600X1200
1680X1050
1920X1050
1920X1200
Avg. set to default
56%
79%
32%
66%
39%
78%
55%
Details
Users with Max Resolution of
1600X1200
User's Chosen
Resolution
% using that
resolution
640X480
800X600
1024X768
1280X1024
1600X1200
Total
Users are lowering their screen resolution to get larger text…
1%
7%
57%
3%
32%
100.00%
•
•
•
•
•
Clipped Text
Layout Issues & Image Size Issues
WinForms Issues
Pixilated Bitmaps
Blurry UI
Mismatched Font Sizes
Setting
What to look for
1024x768 @ 120 DPI*
This is an effective resolution of ~800x600, so look for UI clipped off
the screen or layout issues. Also look for pixilated bitmaps
and icons.
*NOTE: if your app requires 1024x768, then do this test
at 1280x960.
1600x1200 @ 144 DPI
Blurry UI. Verify that all mouse operations work, especially drag and
drop operations. Also verify full-screen modes work properly
1600x1200 @ 144 DPI with DPI
Virtualization Disabled
Often buttons and UI won’t scale in relation to larger text and there
will be significant text clipping. Look for layout issues in general and
pixilated bitmaps and icons.
from DPI UI -> Custom -> use XP Style Scaling
Recommendation: Write a list of the issues identified, best is to add them to
your bug DB with a High DPI tag for later validation. Integrate a variety of
configurations into all future test passes. Also see references for link to
whitepaper on how to remedy issue you find.
http://msdn.microsoft.com/dede/windows/bb980924.aspx
http://blogs.msdn.com/windowssdk/
http://code.msdn.microsoft.com/WindowsA
PICodePack
http://www.microsoft.com/downloads/detail
s.aspx?FamilyID=1C333F06-FADB-4D939C80-402621C600E7&displaylang=en
…and beyond
Running
Not running
Active
Multiple
windows +
hover
A Detailed Look
Pinned category
Destinations
(“nouns”)
Known categories
Custom categories
Tasks
(“verbs”)
User Tasks
Taskbar Tasks
Design Considerations
Overlay and Progress Icons
Design Considerations
www.isvappcompat.com/de
www.microsoft.com/bizspark
Microsoft BizSpark™ is a global program designed to
providing:
Software
Visibility
Support
Software
• Full Featured Development tools and production licenses
of server products
• No upfront costs (USD$100 at program exit)
Support
• Community support from network and hosting partners
• Professional technical support from Microsoft
Visibility
• Profile and promotion on the BizSparkDB
© Copyright 2009 Microsoft Corporation. Alle Rechte vorbehalten.
MSDN Webcasts: http://www.msdn-online.de/webcasts
For Web Pros
1
2
Drive new business opportunities
o
WebsiteSpark Marketplace
o
Partner Recruiting Portal
o
Web App Gallery
Benefit from professional support and training
o
o
o
o
3
www.microsoft.com/web/websitespark
Two professional support incidents per program membership for break-fix
issues
Unlimited access to technical managed newsgroups on MSDN
Unlimited program support for non-technical issues
Broad community support through partners and peers
Receive software and solutions for development and hosting
o
Design Tools/Development Tools/Testing Tools:
o Visual Studio® 2008 Professional Edition – 3 user licenses
o Expression® Studio 2 (or 3) – 1 user license
o Expression® Web 2 (or 3) – 2 user licenses
o Windows Web Server® 2008 (or R2 when available) – 3 user licenses
o SQL Server® 2008 Web – 3 user licenses
o
Production Hosting Licenses (if self-hosting)
o Windows Web Server 2008 R2 (when available) – 4 processor licenses
o SQL Server 2008 Web Edition – 4 processor licenses
o
Premium Web site control panel (DotNetPanel)
•
•
• “Application Compatibility Cookbook
• Application Compatibility
•
• “Windows 7 Application Quality Cookbook
us/windows/aa904987.aspx
http://msdn.microsoft.com/en-
http://technet.microsoft.com/enus/desktopdeployment/bb414773.aspx
DevReadiness.org
http://channel9.msdn.com/tags/Application+Compatibility/
http://msdn2.microsoft.com/enus/library/bb250462.aspx
http://msdn2.microsoft.com/enus/library/bb625964.aspx
http://go.microsoft.com/fwlink/?LinkID=129586
http://www.vesa.org/Public/EEDIDguideV1.pdf
http://technet.microsoft.com/en-us/library/cc722301.aspx
http://technet.microsoft.com/en-us/library/cc721929.aspx
http://blogs.msdn.com/e7/archive/2008/09/13/follow-up-on-highdpi-resolution.aspx
http://blogs.msdn.com/e7/archive/2008/09/16/more-follow-up-todiscussion-about-high-dpi.aspx
disup@microsoft.com
fitmit7@microsoft.com