Win7 LUA/Non-Admin Application Integration Engineer (ENG-60) Print E-mail
Win7 LUA/Non-Admin Application Integration Engineer (ENG-60) [4 Days] $1790
CSI-300 Foundations [2 Days]CSI-450 LUA/Non-Admin Apps [2 Days]
ENG
Track Details:
  • 4 Days
  • $1790 USD
    • Delivery:
  • Live Online

    • Win7 LUA/Non-Admin Application Integration Engineer track gets you up to speed on testing and remediating applications to run on Windows 7 under user profiles that do not have administrative rights. On average 25% or more of your applications will not work well under application virtualization - knowing how to integrate applications to run natively on Windows 7 without admin rights is very relevant regardless of your primary application provisioning method.  If you have been searching for Application Compatibility Toolkit (AppCompat) training, this course will be of interest because AppCompat is covered as one of the core solutions for getting applications to run with administrator rights.

    Click to Register:

    Foundations [2 Days]

    view_track_48

    CSI-300

    Foundations of the Native
    Windows Application Environment

    This component course lays the ground work for understanding how the operating system interacts with natively installed Windows applications. Understanding the way in which applications and the operating system expect to be interacting is critical for engineering applications to successfully run under alternative environments such as application virtualization, compatibility shimming, application streaming and cloud environments. This course first covers the Windows Application Environment of the traditional Win32 core up to Windows XP. Next it covers the many new changes to the native application environment that were made in version 6 of the OS kernel that was released with Windows Vista and is in Windows 7 and Server 2008.

    Topics

    Fundamentals of Windows Processes
    Anatomy of a process, Permissions, Loading DLLs and Other Code, Security Tokens, Sessions.

    COM Fundamentals
    COM Operations, HKCR, Tracing COM, DLL Loading, Loading Overrides (.LOCAL)

    Windows Code Files
    Anatomy of EXEs and DLLs, DLL Loading, Editing EXEs.

    Processes for Kernel 6 (Win7, Vista, Win2008)
    Windows Integrity Mechanism (WIM) Integrity Levels (IL), User Account Control (UAC), Security Manifesting, On The Fly Virtualization, COM and UAC, Disable UAC, Windows Resource Protection (WRP), User Interface Privilege Isolation (UIPI), Win7: Per-User Applications (PUA), Win7: XP Mode

    IE Changes for Kernel 6
    IE Protected Mode (IEPM), Usage of ILs, Usage of UAC Virtualization

    Application Internals
    The main ways in whch an application integrates with Windows. Environment variables, App Paths, Shortcuts, Extension Mapping, Shell Extensions, etc.

    Labs & Templates:
  • Procmon filter templates
  • Tracing COM
  • Replacing internal UAC manifests
  • Virtualization: Detecting, Tracing, Cleaning Up
    • Tools:
  • Process Explorer (Procexp.exe)
  • Process Monitor (Procmon.exe)
  • Explorer Suite EXE Editor
  • whoami
  • RegScanner
  • RegfromApp
  • AppCompat
  • AppVerifier

    • LUA/Non-Admin Apps [2 Days]

    Non-admin

    CSI-450 - Win7 LUA/Non-Admin Application Integration

    Least-privileged User Account or LUA is the desired approach for all computing platforms. Essentially it means that applications should be able to run effectively with regular user rights and permissions. This course gives the fundamentals of how to test for, detect and mitigate application behaviors which impact application compatiblity and performance.

    Topics

    Native Platform Still Relevant
    Even if you will be persuing application virtualization as your primary method of running applications without admin rights, there will still be a stubstantial number of applications that cannot be virtualized. If you company is committed to running Standard Users (LUA/Non-Admin), then these applications will need to be integrated directly into Windows 7.

    Testing and Discovery of LUA Issues
    A variety of tools will be used to detect LUA issues, including Process Monitor (Procmon), Process Explorer (ProcExp), Multimon (system monitor), LUA Buglight, Event Logs, Object Auditing, Standard User Analyzer, AppVerifier and many others.

    Methods for Mitigating LUA Issues
  • Change the source code (not covered in class).
  • Shim the problem by preconfiguring PCA.
  • Shim the problem with Compatibility Admin.
  • Reconfigure Windows Security.

    • Mitigation by Permissions Changes
    You will learn what permission changes are required to mitigate various LUA issues.
  • File and Registry Permissions.
  • User Account Special Permissions.
    • Mitigation by Shimming
    You will learn to us Compatibility Admin from the MS Application Compatibility Toolkit to shim a variety of related problems that can create problems getting applications to run.
  • Administrator Rights Checks.
  • OS Version Checks.
  • Other Software Version Checks.
  • Windows Standard Folder Redirection.
  • Setup.exe and MSI shims.

    • Other Shimming Topics
  • Methods of deploying shims (per-app, Corporate-wide, MSI).
  • Auditing Shim Application
  • How PCA (Program Compatibility Assistant) works, how to adjust settings it makes and how to deploy PCA tweaks in packaging.

    • Displaying & Suppressing the UAC Prompt
    Teaches the many ways there are to display or suppress the UAC prompt including: shims, environment variables, shortcut properties, shell verbs, manifests and scripting.

    Isolating DLLs
    Application virtualization can handles DLL isolation very elegantly.  However, applications that cannot be virtualized will need to use traditional techniques such as .LOCAL, Side-by-Side (SXS) and .NET manifests to facilitate isolation.

    Pre-requisites
    It is important that you have a solid understanding of the Native Windows Application Environment before taking this course. This content is taught in our CSI-300 course.

    Labs & Templates:
  • LUA Buglight for detecting LUA bugs
  • AppVerifier
  • Comparison Testing
    • Tools:
  • LUABuglight
  • Compatibility Admin (shimming)
  • AppVerifier
  • Standard User Analyzer
  • All tools from CSI-300

    		•