linkmon | Link Generator for Tinkerhub | Generator Utils library

So... I got it. Crazy enough, it was a combination of all the different things I was looking at. When the server is executed as System not from my logged on user (via psexec) but via either Local Policy > Startup Script or Scheduled Task running as System:

1. ...it gets isolated with Windows Integrity isolations
2. ...it gets dynamically allocated in the \BaseNamedObjects Kernel namespace instead of the \Sessions\1\BaseNamedObjects as it does when executed as an interactive user (so you need to update your name targeting)
3. ...it gets stamped with a new and very limited ACL
4. This happens to ALL kernel level objects -- so I had to account for these considerations on my MemoryMappedFile AND my Semaphore

So the following modifications were made to address the aforementioned points:

1. At runtime, the server adjusts the SACL to allow access to by Low Integrity Processes
2. While the server targets, just the name, 'LinkMon', the client had to target, 'Global\LinkMon' to properly locate the new location of the MMF memory section
3. The server created the MMF and Semaphore with Constructors that set explicit ACLs to allow for access (ultimately Everyone, Full Control) -- I haven't played seeing how limited I can make this to still allow access. I'll probably try limiting this further to something like Authenticated Users\Read, but I need a break.

And finally, here are the final test client and server (remember server running as System from a Scheduled Task) that allows the server to write data to the MMF and a standard user running client to read from the MMF:

Server (heavy inline comments):