<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.msipfooter32dee6de, li.msipfooter32dee6de, div.msipfooter32dee6de
{mso-style-name:msipfooter32dee6de;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoPlainText">I think you have misunderstood what the software does (and many others with them).<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">They eliminate the need of giving local admin privileges to the user and instead elevates specific processes (based on location, file owner, hash, signature etc) to have local admin rights for that specific process, not give local admin
to everyone. You instead do a hook before LSA performs any kind of authentication verification and then add/remove security tokens as you see fit.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">This gives you a flexibility to, as an example, giving temporary rights for one specific .exe file and that file only instead of giving full system wide admin rights, thus minimizing the exposure and attack surface.<o:p></o:p></p>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#A6A6A6">Mvh<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">Martin Gustafsson<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"><span style="color:windowtext"><o:p> </o:p></span></a></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailEndCompose"><span style="color:windowtext"><o:p> </o:p></span></span></p>
<p class="msipfooter32dee6de" align="right" style="text-align:right"><span style="mso-bookmark:_MailEndCompose"><span style="font-size:10.0pt;color:#888888">General Information</span><o:p></o:p></span></p>
<span style="mso-bookmark:_MailEndCompose"></span>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Enterprise [mailto:enterprise-bounces@mozilla.org]
<b>On Behalf Of </b>Tanstaafl<br>
<b>Sent:</b> den 17 maj 2018 12:38<br>
<b>To:</b> enterprise@mozilla.org<br>
<b>Subject:</b> Re: [Mozilla Enterprise] FirefoxESR 60 and Windows 10 edition 1803 Problems installing.<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">I'd never heard of Avecto Defendpoint, and after investigating, I see why.<br>
<br>
A tool apparently aimed at Admins/Entities that think they need to provide Local Admin privileges to all users - that can't properly interact with UAC?<br>
<br>
Sorry, but my advice is dump the useless tool.<br>
<br>
On Thu May 17 2018 05:44:29 GMT-0400 (Eastern Standard Time), William Spratt <a href="mailto:William.Spratt@fera.co.uk">
<William.Spratt@fera.co.uk></a> wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi All,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Bit of an odd one this. In Windows 10 (edition 1803) Firefox install okay on clean installs. After installing the Avecto Defendpoint client, it installs okay in Safe Mode. However…
in normal mode, the installer unpacks the files, but then stops. The installer window doesn’t open. Putting the “.exe” file into compatibility mode for 7 or 8 means the installer windows opens, you can select options, but then the progress bar hangs at about
10%.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The cause is clearly Avecto Defendpoint Client. The install is being done with an Admin account, so the client shouldn’t be getting involved at all. Firefox also installs without
issue in previous editions of Windows 10 (with the client installed). Previous versions of Firefox have the same issue when trying to install in edition 1803 with the client active.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Has anyone had any similar experiences?<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I’d like to whitelist the install files in the Avecto console to see if that resolves the issue. Where does the “.exe” upack the files to?<o:p></o:p></p>
</div>
</blockquote>
</div>
<br>
<p style="font-size:8pt; line-height:8pt; color:#aaaaaa; font-family: 'Calibri',Arial,sans-serif; ">
The information contained in this e-mail message may be privileged, confidential, and protected from disclosure. Any unauthorized use, printing, copying, disclosure or dissemination of this communication may be subject to legal restriction or sanction. If you
think that you have received this e-mail message in error, please reply to the sender and delete this message from your computer.
<br>
</p>
</body>
</html>