Skip to content

Support AppLocker #112538

@FolBol

Description

@FolBol

=> done - not fixed, seems to be even worse, as VSCode does only show black Window when started as admin.

  • VSCode Version: 1.52.0, Electron 9.3.5
  • OS Version: 2004

Steps to Reproduce:

  1. Activate AppLocker with Default Rules
  2. Start VSCode elevated
  3. Look at the AppLocker Logs - you will see 50/50 denied/allowed events:
    Good and normal:
    %OSDRIVE%\USERS\ADMIN\APPDATA\LOCAL\PROGRAMS\MICROSOFT VS CODE INSIDERS\CODE - INSIDERS.EXE was allowed to run.
    Bad:
    %OSDRIVE%\USERS\ADMIN\APPDATA\LOCAL\PROGRAMS\MICROSOFT VS CODE INSIDERS\CODE - INSIDERS.EXE was prevented from running.

Does this issue occur when all extensions are disabled?: Yes

Problem seems to be the way code.exe does launch itself on startup, using the API CreateProcessAsUserW() (50%) in a special way. (dwCreationFlags as per debug: 0x8040c + dwflags of startupinfo 0x180)
But this seems not to be the only differnence as this is not causing an issue on a little test-program.
The (and those are the allowed events) process creates which are done using API CreateProcessW() (50%) do not cause an issue.

Metadata

Metadata

Labels

chromiumIssues and items related to ChromiumsandboxRunning VSCode in a node-free environmentunder-discussionIssue is under discussion for relevance, priority, approachwindowsVS Code on Windows issuesworkbench-run-as-adminIssues concerning running as administrator

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions