
The possible reason is probably to discourage users from disabling it from automatically startup on system boot up, or simply uninstalling it. It’s unknown why Teams Machine-Wide Installer identifies itself as just “Program”. Whenever a user signs into a new Windows User Profile, the installer will be launched and a copy of the Teams app will be installed in that user’s AppData folder.

The job of Teams Machine-Wide Installer aka the PROGRAM is simple. "TeamsMachineInstaller"="\"%ProgramFiles%\Teams Installer\Teams.exe -checkInstall -source=default\"" In addition, it also add the following value to registry to auto launch itself on system startup. When deployed, the Teams MSI will place an installer in Program Files. Teams Machine-Wide Installer is a Teams Windows Desktop Client in MSI installer format that is used by Microsoft and corporations to deploy Teams app. Windows 10 Enterprise Insider Preview 圆4 rs1_release.The “Program” app is enabled to start up by default, and is apparently the result after installing Teams Machine-Wide Installer.

ULONGLONG GuardCFLongJumpTargetTable // VA ULONGLONG GuardCFAddressTakenIatEntr圜ount ULONGLONG GuardCFAddressTakenIatEntryTable // VA I failed to find any public headers or symbols with the updated structure yet, so this might be open for a while.īut if there is some consistency applied to naming the new fields there, the dumpbin output above hints towards this addition to what the latest Windows SDK has: Section contains the following load config:Ġ00000018015D1D0 Guard CF address of check-function pointerĠ000000180104000 Guard CF address of dispatch-function pointerĠ000000000000000 Guard CF address taken IAT entry tableĠ000000000000000 Guard CF long jump target table All rights reserved.ĭump of file C:\Windows\System32\ntdll.dll

The latest Visual Studio 2015 tools apparently support it already:Ĭ:\Program Files (x86)\Microsoft Visual Studio 14.0\VC\bin\>dumpbin.exe /LOADCONFIG C:\Windows\System32\ntdll.dllĬopyright (C) Microsoft Corporation. Like in #13665 before, it is related to more "Control Flow Guard" changes ( ). (Where -626 is VERR_LDRPE_LOAD_CONFIG_SIZE, for the external readers.) : RTLdrOpenWithReader failed: Unknown Status -626 (0xfffffd8e) (Image='\SystemRoot\System32\ntdll.dll'). It's that time of the year again – the sizeof(IMAGE_LOAD_CONFIG_DIRECTORY64) has changed.Ĭ:\Program Files\Oracle\VirtualBox>VBoxSDL.exe
