L

laptops, undocking, 107

LDAP remote file access, 145

LeBlanc, David, 49, 55, 83, 130, 181

legacy applications, and virtualization, 28

LFH (low fragmentation heap), enabling, 59

Limited User Account (LUA), 14

linked tokens, 20, 21

linkers.

See also individual linkers

/DynamicBase, 3, 11

/NXCompat, 3, 11, 129

/SafeSEH, 3, 11

links, forward and backward, checking, 57

Linux

services, 97

symlink security bugs, 45

Lipner, Steve, 1

Litchfield, David, 67, 68, 71

little-endian format, 6

LoadLibrary, 51, 52

local namespaces, 110–111

local service accounts, 99, 100

local system service account, 99

local user service accounts, 99

localization, 8

logoffs, forced, 165–166

logon desktop, 158

LogonUser, 106

logons, and console sharing, 110–11

long-lived pointers, 163, 172

“Longhorn” server, Windows, and OCSP, 146

LookupAccountName, 102

low fragmentation heap (LFH), enabling, 59

low-integrity objects

determining, 39–40

labeling, 37–39

low-integrity processes, 32–34, 41–42

sample code for, 35–36

write locations, 37

LUA (Limited User Account), 14