Back at the beginning of the month I gave a tip on spawning external processes securely in Windows, and recommended that developers look at using the CreateRestrictedToken() API to restrict access of a process. I have received a couple of emails on this (why don't you guys ever want to comment on my blog?) with one email asking just how to do this using a restricted token.
[SilverStr's ramblings at the Sanctuary]

Read more @ http://silverstr.ufies.org/blog/archives/000401.html

[Now Playing: Take My Breath Away - Top Gun - Original Motion Pict]