uac | 易学教程

CreateDesktop() with Vista UAC (C Windows)

阅读更多关于 CreateDesktop() with Vista UAC (C Windows)

问题 I'm using CreateDesktop() to create a temporary desktop where an application will run, perform a cleanup action (while remaining out of the way) and terminate. I'm closing that desktop once the application is gone. Everything is fine when using Windows XP and even Vista. The problem arises when you enable the (annoying) UAC. Everything is OK when you create a desktop, but when you call CreateProcess() to open a program on that desktop it causes the opened application to crash with an

How to Launch an Exe at User Level from a Higher Level

阅读更多关于 How to Launch an Exe at User Level from a Higher Level

问题 I would like a process to always run at the user level. Either when it is launched by the installer (custom, not msi), which runs as at the administrator level, or when a user logs on. Looking around, I'm not sure this is possible. 回答1: The easiest way is to have 2 processes. One is normal user and it launches elevated/admin process. Then admin process can use IPC to ask normal user process to do things. If you have no normal user process, then Raymond Chen documents: Going from an unelevated

Removing Administrator Privilages from Process

阅读更多关于 Removing Administrator Privilages from Process

问题 With the help of this great MSDN article, my first idea was to simply check if the process is using an elevated Administrator group, and using AdjustTokenGroups() I would set the Administrator group to SE_GROUP_USE_FOR_DENY_ONLY . Unfortunately though, we can't modify the administrator group on the currently running process as it also has the SE_GROUP_MANDATORY attribute, which makes it inelligable for changing. The MSDN document has this to say about it: The AdjustTokenGroups function cannot

How to launch program with user permissions instead of active permissions

阅读更多关于 How to launch program with user permissions instead of active permissions

问题 I have a C# application which runs and displays a tray icon. I have an installer for my tray application which launches the application after installation. The installer requires admin permissions whereas the tray icon must be run with normal permissions. My installer currently breaks this - when the installed tray application is launched it inherits admin permissions from the installer process. As part of my installer I am launching a C# application to perform some custom work. This small

Is it possible to install into Program Files with limited privileges?

阅读更多关于 Is it possible to install into Program Files with limited privileges?

问题 I have an application that will be deployed as MSI package (authored in WiX). I am deciding whether to specify elevated or limited privileges as required for the installer. The application does not include anything requiring elevated privileges besides the default install location, which is under Program Files. Now the problem: If I specify elevated privileges , then the user is prompted by UAC for administrator password during the installation. This is not required and prevents non-admin

Permissions issue when publishing to WMI under network service account

阅读更多关于 Permissions issue when publishing to WMI under network service account

问题 I'm adding WMI publishing to a .net framework 3.5 based windows service that is running under the 'network service' account. According to a document I came across on MSDN, the 'network service' account should by default have WMI publishing permissions. (" By default, the following users and groups are allowed to publish data and events: ... Network Service , ... ") However, when the service calls Instrumentation.Publish(myStatusClassInstance), it throws a DirectoryNotFoundException; System.IO

Xammp functions are restricted due to UAC win10. How to fix it?

阅读更多关于 Xammp functions are restricted due to UAC win10. How to fix it?

问题 I'm trying to install xampp (xampp-win32-7.0.0-0-VC14-installer) but I get this warning message saying that "Because an activated UAC on your system, some functions of XAMPP are possibly restricted..." Here is xamp warning message screenshot: Although I have already disabled UAC settings and gave permission to C drive and its subfolders, I still get this message. Here is my UAC settings's screenshot: If anyone could help me to fix this problem, I would appriciate. Thank you! 回答1: Moving the

launch C# exe without prompting UAC on Windows 7

阅读更多关于 launch C# exe without prompting UAC on Windows 7

I have C# executable that I want to launch on Windows 7 without the dialogbox asking for run-as-administrator.. So here is my code inside the program that launches the C# executable named testApp.exe. Process testApp = new Process(); testApp.StartInfo.FileName = "C:\\Program Files\\Common Files\\testApp.exe"; testApp.Start(); I also create the minfest for both programs. app.manifest for testApp.exe and app.manifest for the program that launches testApp.exe, and then I change the following line in both manifest to: requestedExecutionLevel level="requireAdministrator" uiAccess="false" When I

git status only correct if “Run As Administrator”, problems due to Windows VirtualStore

阅读更多关于 git status only correct if “Run As Administrator”, problems due to Windows VirtualStore

I have a git repository for an Excel Addin I wrote, so the path is "C:\Program Files\Microsoft Office 15\root\office15\Library\BTRTools" (That 'Library' path is the required install parent of Excel add-ins for them to work properly, so I can't change it). I have UAC turned on in both Win7 and Win8.1. In Win7 everything works fine, however in Win8.1 I get a status of basically 'everything changed' (but even some weirder stuff of files first mentioned as 'deleted' then mentioned again in same status as 'untracked'. The repository is really 'clean', despite what git status says, but I can't pull

log4net writing to file. How to open up permissions

阅读更多关于 log4net writing to file. How to open up permissions

I was happily using log4net with my WPF program on an XP machine and happily using a fileAppender FileAppender to write log messages to c:\log.txt. All was well. However, it does not work on a Windows 7 machine. No error or anything, just that the file isn't created, much less logged to. A little research reveals that it's a file permissions problem (UAC) with Windows 7, and in fact it works if I run the executable as administrator. It doesn't work if I just click on it (even though I'm logged on as administrator) and it doesn't work when I launch from Visual Studio. Questions: 1. Can someone