Anybody have any idea how to disable the default windows firewall using an application or possibly even a macro in an office file? Just wondering whether it was [still] possible and if so, how it works.

EDIT: oh, and also how to run a command prompt as SYSTEM with a less-than-admin account. i've read about (and tried) the "at" command to add a task to the windows scheduler, but it doesn't work unless you're a local admin anyway. some exploit that is.

yes, and yes.

just like any os there are plenty of local roots. for windows the latest public i can remember is ms08025

windows firewall is useless anyways. all it does is block incoming traffic, don't need to disable it at all. if you are local, all you need to do is inject some code into internet explorer that process is typically granted full access any ways.

turning it off is just a matter of changing some settings, once you are root you can probably do it 'easiest' by writing some values to the registry system hive. but i don't see the point if your code can dial out, why bother disabling anything.

hmmm, somehow i don't understand what it is that you mean. i know that it seems similar, but i wanted to know how to run an app as the "SYSTEM" user specifically. morbid curiosity really. the only PCs i "tamper with" these days are my own.

local root it, and call runas

api supports it, just need to get the rights.