One technique would be to construct a wrapper/filter that would intercept
Win32 system calls.
I think you would have something to start with in this location:
http://msdn.microsoft.com/msdnmag/issues/1000/VTrace/VTrace.asp
It's the decription of a system tracer that logs the activity in windows
Try "Programming Windows Security" by Keith Brown. A lot of good info.
>>> Brian Husted <[EMAIL PROTECTED]> 01/22/02 01:01PM >>>
I am attempting to write a program that will limit the
ability of applications to perform certain windows
functions ( i.e. printing, File I/O operations.) Does
an