Secure mode. Only the service SID has permissions for these resources. Compatible mode. The provider host process allows access to the NetworkService or LocalService accounts depending on the hosting model. For more information about hosting models, see Provider Hosting and Security. Windows Vista and Windows Server To access the registry keys and values for controlling secure and compatible modes for the provider host process, you must install the security update in KB The secure and compatible mode settings are specified through registry keys.
This key controls the behavior of individual providers. All of the providers that are listed in this key always run in secure mode. All inbox providers that are shipped with Windows are listed under this key, and are run in secure mode by default. This key takes precedence over providers listed in the CompatibleHostProviders key. All providers that are listed in this key always run in compatible mode. This key is empty by default. If a provider is listed both in the SecuredHostProviders key and in the CompatibleHostProviders key, the provider is run in secure mode.
The CompatibleHostProviders key provides application compatibility for third-party applications if the DefaultSecuredHost key is set to 1 and the provider is known to not function in secure mode. By default, this value is set to zero and all third-party providers are run in compatible mode. Administrators can make their computer more secure by default by setting the DefaultSecuredHost value to 1. The DefaultSecuredHost value does not affect the other registry keys. The providers that are listed in the SecuredHostProviders key remain in secure mode, and the ones that are listed in the CompatibleHostProviders key remain in compatible mode.
The following list lists the possible registry settings and the associated running modes for a provider. For more information, see Group Policy Management Console.
The following procedures illustrate how to manage secure and compatible mode settings by using group policy preferences. If the user does not have the correct access to the registry key, the open operation fails. For more information, see Enabling and Disabling Privileges. To view the current access rights for a key, including the predefined keys, use the Registry Editor Regedt After navigating to the desired key, go to the Edit menu and select Permissions.
Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Please rate your experience Yes No. Any additional feedback? In this article. Required to request change notifications for a registry key or for subkeys of a registry key.
0コメント