The ultimate solution of Ziguang pinyin in Windows Vista IE

Original Text excerpt
Itecn blog
, Author: Basin
Original article address:
Click to view
Itecn blog
It is composed of nearly 40 Microsoft MVPs, MCT, and Microsoft employees. It aims to promote Microsoft it pro technology.
Prepared Basin
Difficulty level200
Link
Http://blogs.itecn.net/blogs/winvista/archive/2006/10/08/3777.aspx
Introduction to the Windows Vista Library
Http://vista.itecn.net/
To study and promote the Windows Vista technology, which consists of multiple Microsoft MVPs and other technology enthusiasts. Most of the members have received Windows Vista lecturers from Microsoft China, and four of them have also received special training from Microsoft Windows Vista in Singapore.
In production
In-depth analysis of Windows Vista ie protection mode
It was mentioned that Ziguang pinyin cannot be normally called in IE browser, and a method is provided to manually create NTFS symbolic links to cheat Ziguang pinyin.
In actual use, it is found that this method works normally most of the time. However, if you have already called Ziguang pinyin before enabling IE, you may not be able to start Ziguang pinyin in IE.
In my article, I also mentioned that Windows Vista does not have a built-in tool and cannot view and set the integrity level of folders.
Is that true?
I had the honor to attend a class by Robert Gu, the leader of Internet Explorer protection, in tech. Ed Beijing. I learned that Windows vista.exe, a command line tool, can be used to view and set the integrity level of a specified folder.
Prompt
Robert Gu, head of development at the Microsoft headquarters, is currently responsible for IE 7 security development. He is the inventor of EFS algorithms. He once led the development of EFS and PKI and is proud of the Chinese.
Now, we can just guess that, even if there is a specific icacls.exe available, we can use it to set the Integrity Level of the working directory "% appdata % \ unispim" in Ziguang pinyin to "low level", regardless of the IE process (low level) and external processes (intermediate), can access the working directory, Ziguang pinyin can work normally.
Next, we will introduce Windows Vista RC2 build 5744 as an example (note that the icacls command cannot work normally in RC1 ):
1. First, add the "Modify an object tag" privilege to the Current Account. Its internal name is serelabelprivilege. The method is to run secpol. MSC, open the "Local Security Policy" Management Unit, expand the local policy and user permission assignment in the left-side console tree, and locate the "Modify an object tag" policy item in the details pane on the right, double-click this policy to add the current Logon account, as shown in the figure below.

 

2. log out and log on again. Run the command prompt as administrator and enter the following command at the command prompt:
Whoami/All | find/I "serelabelprivilege"
The result is shown in the figure. This indicates that the current logon user has the serelabelprivilege privilege, but the status is disabled.
 

3. Run the following command:
Icacls.exe % appdata % \ unispim/setintegritylevel level: l
The command result is shown in the figure below, indicating that the command is successfully completed.
 

4. Run the following command to check the integrity level of the % appdata % \ unispim directory:
Icacls.exe % appdata % \ unispim
The command result is shown in the figure below, indicating that the mandatory Integrity Level of the directory is "low ".
 

After such processing, you can enable Ziguang pinyin In the IE browser normally, but cannot disable the IE protection mode for specific websites. If you occasionally find that you cannot start Ziguang pinyin in IE, do not worry. You only need to close other programs that enable the input method, such as edit programs such as outlook, word, and notepad, then you can use Ziguang pinyin in IE.
Next, there are two questions:
1. When careful readers find that they use the whoami/all command to view the access token of the current user, they find that the serelabelprivilege privilege is disabled. This privilege is used to set the Object Integrity Level. Why can the icacls Command run successfully?
When the icacls command is run to set the integrity level of the directory, the access token of the icacls process automatically enables the serelabelprivilege privilege, so that the command can be completed smoothly.
2. Because the icaclscommand under Windows Vista rc1cannot work normally, you can download the third-party command line tool chml.exe, which was prepared by Mark minasi (the author of mastering Windows Server 2003:
Http://www.minasi.com/vista/chml.exe

Note that the usage Syntax of chml is different from that of icacls. For details about how to use chml, refer to its online help information!
This post comes from the group music community-http://q.yesky.com/group/review-8437195.html