Menu

The Limited User Account Privilege Predictor (LuaPriv) has two primary goals:

  1. Predictive: While running an application with administrative privilege, predict whether that application would work as well if run with less privilege (generally, as a normal user).

    For example, if the application writes to files that only allow members of the Administrators group access, then that application will not be able to write to the same file if run as a non-administrator.

  2. Diagnostic: When running as a non-administrator, identify potential problems that may already exist with the current run.

    Continuing the previous example, if the application tries to write to a file that only grants members of the Administrators group access, the application will get an ACCESS_DENIED error. If the application does not operate correctly, this operation may be the culprit.