File access, property sheets and privilege escalation

Bugs and issues.
Post Reply
Message
Author
JC2k8
Posts: 3
Joined: 16.06.2014, 10:17

File access, property sheets and privilege escalation

#1 Post by JC2k8 » 14.11.2025, 10:07

I've been using FreeCommander for quite a few years now and apart form the occasional hiccup everything went well.

Now corporate changed some things and hardened the environment. We're plagued with Ivanti Application Control, for instance, but the security tool doesn't really matter. What matters is this:

We're not allowed to execute installers or executables that aren't trusted. Now, FreeCommander seems to request an overly broad set of permissions when enumerating files, like WRITE_DAC, WRITE_OWNER, or ACCESS_SYSTEM_SECURITY. In the regular view I'm not able to retrieve the executable's icon any longer. Also, when opening the property sheet for such a file (*.exe, *.msi, etc) FreeCommander isn't retrieving properties of the selected file but rather properties of - in my case - Ivanti Application Control which denied access due to overly broad requested access rights.

For the sake of completeness: I'm granted access to a specific directory where relaxed settings apply - everything works there. Also, everything works perfectly with Windows Explorer which is designed to follow the principle of least privilege. Somehow, FreeCommander (and other alternative file managers) seem to request more rights just in case the user wants to modify things. To my mind, it would be best if FreeCommander would also follow the principle of least privilege because more and more companies will enforce increased security.

I wasn't able to find any related setting in the GUI.

Post Reply

Who is online

Users browsing this forum: No registered users and 64 guests