Why is it not possible to inject an assembly into the process pfwsmgr.exe?

Version 5

    Question

    Why is it not possible to inject an assembly into the process pfwsmgr.exe?

     

    Consider the following scenario:

     

    • A third party application is trying to inject an assembly into the process pfwsmgr.exe.
    • This third party application might not be behaving or functioning correctly.

     

    In this scenario, the third party application is receiving an Access Denied message when trying to open the process pfwsmgr.exe.

     

     

    Answer

    The process pfwsmgr.exe belongs to Ivanti Workspace Control.

    It composes and controls the user session including some parts of the security of the user session.

    Because of this, all access to the pfwsmgr.exe is prohibited with the exception of other Workspace Control components.

    This behavior is by design of Ivanti Workspace Control.