4.0.4

Table Of Contents
VMware, Inc. 69
Appendix A Configuring Package Parameters
Examples
Thedefaultvalueoffalseensuresthatthevirtualapplicationcannotaccessprotectedelements.
[BuildOptions]
UACRequestedPrivilegesUiAccess=false
Configuring Objects and DLL Files
YoucanuseThinAppparameterstospecifyCOMobjectaccessandDLLloadingrequirements.
ExternalCOMObjects
TheExternalCOMObjectsparametercontrolswhetherThinApporWindowscreatesaspecificCOMobject
CLSIDkey.
Bydefault,ThinAppcreatesallCOMobjectsinthevirtualenvironment.COMsupportsoutofprocess
executableserversandservicebasedCOMobjects.IfanapplicationcancreateCOMobjectsthatgenerate
modificationsonthehost
computer,theintegrityofthehostcomputerisatrisk.IfThinAppruns
outofprocessandservicebasedCOMobjectsinthevirtualenvironment,ThinAppstoresinthesandboxall
changesthattheCOMobjectsmake.
Examples
YoucaninstructThinApptoruntwoCOMobjectsoutsideofthevirtualenvironmentiftheapplicationcreates
theobjects.
[BuildOptions]
ExternalCOMObjects={8BC3F05E-D86B-11D0-A075-00C04FB68820};{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
ExternalDLLs
TheExternalDLLsparametercanforceWindowstoloadDLLfilesfromthevirtualfilesystem.
ThinApploadsDDLfilesfromthevirtualfilesystemandpassestheloadingprocesstoWindowsforDLLfiles
onthephysicalfilesystem.In somecircumstances,WindowsmustloadaDLLfileinthevirtualfile
system.
Forexample,youmighthaveaDLLfilethatinsertsitselfinto otherprocessesusingWindowshooks.TheDLL
filethatimplementsthehookmustbeavailableonthehostfilesystemandWindowsmustloadthatfile.When
youspecifyaDLLfileintheExternalDLLsparameter,ThinAppextracts
thefilefromthevirtualfilesystem
tothesandboxandinstructsWindowstoloadit.
TheExternalDLLsparameterdoesnotsupportaDLLfilethatdependsonotherDLLfilesinsidethevirtual
filesystem.Inthiscase,WindowscannotloadtheDLLfile.
Examples
YoucaninstructThinApptopassontoWindowstheloadingprocessoftheinject.dllandinjectme2.dll
files.
[BuildOptions]
ExternalDLLs=inject.dll;injectme2.dll
IsolatedMemoryObjects
TheIsolatedMemoryObjectsparameterliststhesharedmemoryobjectstoisolatefromotherapplications.
ApplicationsthatuseCreateFileMappingandOpenFileMappingWindowsfunctionscreatesharedmemory
objects.Sharedmemoryobjectscanhavenamesorremainanonymous.Namedobjectsarevisibletoother
applicationsrunninginthesameuseraccount.Youmightwantto
isolatesharedmemoryobjectstoensurethat
virtualapplicationsandsystemobjectscannotdetecteachother.