3 ms·

"System" is the highest privilege, like "root" on Linux.

• jodrellblank 11y ago
  Not necessarily in Windows 10 Enterprise, there can be some limits to what "System" can access, with a feature designed to protect credentials from exploited drivers: With Windows 10 and Device Guard, credentials are stored encrypted using Hyper-V, an approach known as "virtualization-assisted security." Credential Guard blocks access "even when an untrusted program has full administrative access to your environment," Drivers can't get into the Local Security Authority of Windows 10 https://redmondmag.com/articles/2015/10/28/windows-10-credential-guard.aspx https://redmondmag.com/articles/2015/10/28/windows-10-creden...
  • creshal 11y ago
    So, System still has full access to ring 0, but some bits of the OS are moved into the hypervisor "ring -1"?
    • WorldMaker 11y ago
      It seems a bit more inception-like than your numerics betray... The driver ring 0 is now a deeper dream than hypervisor ring 0.
  • okasaki 11y ago
    You can limit root on linux too with a MAC framework.