0
I'm going to run highly dangerous executables in Windows XP residing inside virtual machine. Due to a large amount of dangerous executables, I can't restore VM to snapshot after every run of an executable. So I would like to run them via (job object and) CreateProcessWithLogon WinAPI (run from another user) to minimize a damage to VM.
How do I set up a user, such that executables running under his rights would have standard input/output (console) rights only or something near to that?
Sometimes guest user can modify desktop, sometimes not. I've seen a couple of other differences in guest user privileges (though, these were high-level ones too). Could you provide some links on how to set such things up? – polkovnikov.ph – 2013-10-16T16:14:50.530
You'd have to check out Group Policies. Google has millions of hits about it – Canadian Luke – 2013-12-12T22:39:03.700