JMich: So basically you say that if the file requests access to %WINDIR% or %ProgramFiles%, extra code is run, even if you do have full access to the directory it's going to be using, but if it's going to look at e:\Movies that you don't have full access, the extra code part won't be run?
Correct.
Of course it may look at normal permissions for read/only and who can access it, but those two directories have extra stuff activated only because of what they are called, rather than having a configuration letting us specify if and where these extra checks should be.
And of course if there
IS a way to configure other directories, it probably isn't documented in a way that the user can take advantage of it. Quite a few behaviors of Windows is obscure, and not really open for modification or adaption. As i recall there was a huge debate over windows 2000, specifically the home edition and the server edition, being that you had a limited number of connections for the standard user, while the server version (being something like $800) gave unlimited connections. Makes sense, except the OS's are
IDENTICAL, even a programmer at M$ said it was a few registry hacks to unlock the full potential of the kernel. (
I'm not sure where the source is)