Microsoft KB Archive/935180

= You cannot block 16-bit applications by using Protection Manager =

Article ID: 935180

Article Last Modified on 7/3/2007

-

APPLIES TO


 * Winternals Protection Manager 1.0
 * Winternals Protection Manager 2.0

-



SYMPTOMS
You want to block 16-bit applications by using Protection Manager. To do this, you define the 16-bit applications as blocked in a Role. However, Winternals Protection Manager cannot block these 16-bit applications.



CAUSE
This problem occurs because the operating system runs the 16-bit applications in NT Virtual DOS Machine (NTVDM). Operating systems that may do this include such Windows XP and Windows Server 2003. An application that runs in NTVDM do not have a Process ID. Therefore, Protection Manager cannot block the application that runs in NTVDM.



WORKAROUND
To work around this problem, follow these steps:
 * 1) Create e a File Set that specifies the following NTVDM components:
 * c:\windows\system32\wowexec.exe
 * c:\windows\system32\wowdeb.exe
 * c:\windows\system32\ntvdm.exe
 * 1) Specify the Deny privilege for the File Set in the Role.

Additional query words: Winternals KB 30450, 16 bit applications, not blocked, 16 bit, NTVDM, DOS

Keywords: kbtshoot kbexpertiseinter KB935180

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.