<EntryPoint>
element, which references the full-trust app. When that application is launched, it does not run inside an app container, but instead it runs as the user as it normally would.Operation | Result | Example |
---|---|---|
Read or enumerate a well-known Windows file or folder | A dynamic merge of C:Program Filespackage_nameVFSwell_known_folder with the local system counterpart. | Reading C:WindowsSystem32 returns the contents of C:WindowsSystem32 plus the contents of C:Program FilesWindowsAppspackage_nameVFSSystemX86. |
Write under AppData | Windows 10, version 1903 and later: New files and folders created under the following directories are redirected to a per-user, per-package private location:
Windows 10, version 1809 and earlier: Copy-on-written to a per-user, per-app location. | AppData is typically C:Usersuser_nameAppData. |
Write inside the package | Not allowed. The package is read-only. | Writes under C:Program FilesWindowsAppspackage_name are not allowed. |
Writes outside the package | Allowed if the user has permissions. | A write to C:WindowsSystem32foo.dll is allowed if the package does not contain C:Program FilesWindowsAppspackage_nameVFSSystemX86foo.dll and the user has permissions. |
System Location | Redirected Location (Under [PackageRoot]VFS) | Valid on architectures |
---|---|---|
FOLDERID_SystemX86 | SystemX86 | x86, amd64 |
FOLDERID_System | SystemX64 | amd64 |
FOLDERID_ProgramFilesX86 | ProgramFilesX86 | x86, amd6 |
FOLDERID_ProgramFilesX64 | ProgramFilesX64 | amd64 |
FOLDERID_ProgramFilesCommonX86 | ProgramFilesCommonX86 | x86, amd64 |
FOLDERID_ProgramFilesCommonX64 | ProgramFilesCommonX64 | amd64 |
FOLDERID_Windows | Windows | x86, amd64 |
FOLDERID_ProgramData | Common AppData | x86, amd64 |
FOLDERID_Systemcatroot | AppVSystem32Catroot | x86, amd64 |
FOLDERID_Systemcatroot2 | AppVSystem32Catroot2 | x86, amd64 |
FOLDERID_Systemdriversetc | AppVSystem32DriversEtc | x86, amd64 |
FOLDERID_Systemdriverstore | AppVSystem32Driverstore | x86, amd64 |
FOLDERID_Systemlogfiles | AppVSystem32Logfiles | x86, amd64 |
FOLDERID_Systemspool | AppVSystem32Spool | x86, amd64 |
Operation | Result | Example |
---|---|---|
Read or enumerate HKLMSoftware | A dynamic merge of the package hive with the local system counterpart. | If registry.dat contains a single key 'Foo,' at runtime a read of HKLMSoftware will show the contents of both HKLMSoftware plus HKLMSoftwareFoo. |
Writes under HKCU | Copy-on-written to a per-user, per-app private location. | The same as AppData for files. |
Writes inside the package. | Not allowed. The package is read-only. | Writes under HKLMSoftware are not allowed if a corresponding key/value exist in the package hive. |
Writes outside the package | Ignored by the OS. Allowed if the user has permissions. | Writes under HKLMSoftware are allowed as long as a corresponding key/value does not exist in the package hive and the user has the correct access permissions. |