Understanding the Running Object Table

are you running another instance elevated? are you running the exe elevated?

When you are a process running as a standard user, you can only see processes/etc that belong to you. So you wouldn’t see processes that are running as administrator.

When running with escalated priviliges, you can see all processes belonging to all users.

Ideally, everything would always run as the “least privileged user”, see http://en.wikipedia.org/wiki/Principle_of_least_privilege

Leave a Comment