Reason for UAC prompt , porting for Win7
-
Hi, I wrote two C++ Windows applications which I previously used on WinXP. The main MFC application gets no UAC prompt when I start it, works fine on Win7. The Win32 application, which is just a
WinMain()with some functionality, gets an UAC prompt as soon as I double click it. Can I find out why? Thanks, let me know if I should provide more details! -
Hi, I wrote two C++ Windows applications which I previously used on WinXP. The main MFC application gets no UAC prompt when I start it, works fine on Win7. The Win32 application, which is just a
WinMain()with some functionality, gets an UAC prompt as soon as I double click it. Can I find out why? Thanks, let me know if I should provide more details!What does the check box "Run as administrator" show (in the "Compatibility" property page of the result exe), please ? :) Here is an example of "any-user" manifest, that could be bind to an exe:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="X86"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>virtual void BeHappy() = 0; -
What does the check box "Run as administrator" show (in the "Compatibility" property page of the result exe), please ? :) Here is an example of "any-user" manifest, that could be bind to an exe:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="X86"
publicKeyToken="6595b64144ccf1df"
language="*"
/>
</dependentAssembly>
</dependency>
</assembly>virtual void BeHappy() = 0;"Run as administrator" is not enabled. Can you give me some background on the manifest? Does every executable need one under Win7 in order to avoid UAC prompt... or is it some API call inside my exe which causes the UAC prompt?
-
"Run as administrator" is not enabled. Can you give me some background on the manifest? Does every executable need one under Win7 in order to avoid UAC prompt... or is it some API call inside my exe which causes the UAC prompt?
// or is it some API call inside my exe which causes the UAC prompt? May be... ...when it (test) will not help : - save the XML-dump as c:\yours.manifest - set the exe-VS\ProjektProperty\Manifest Tool\Input and Output\Additional Manifest Files to c:\yours.manifest - rebuild An "admin" API call would just fail, I think, by filled LastError (about some rights) in the "non-admin" modus... :)
virtual void BeHappy() = 0; -
Hi, I wrote two C++ Windows applications which I previously used on WinXP. The main MFC application gets no UAC prompt when I start it, works fine on Win7. The Win32 application, which is just a
WinMain()with some functionality, gets an UAC prompt as soon as I double click it. Can I find out why? Thanks, let me know if I should provide more details!It could simply be the name of your exe file also. Vista (and Windows 7) UAC also uses heuristics to determine if an application needs admin privilege. See this article[^] on MSDN (especially the "Installer Detection" part). Even strings in the string table of your application can trigger UAC. Hope that helps.
Karl - WK5M PP-ASEL-IA (N43CS) PGP Key: 0xDB02E193 PGP Key Fingerprint: 8F06 5A2E 2735 892B 821C 871A 0411 94EA DB02 E193
-
It could simply be the name of your exe file also. Vista (and Windows 7) UAC also uses heuristics to determine if an application needs admin privilege. See this article[^] on MSDN (especially the "Installer Detection" part). Even strings in the string table of your application can trigger UAC. Hope that helps.
Karl - WK5M PP-ASEL-IA (N43CS) PGP Key: 0xDB02E193 PGP Key Fingerprint: 8F06 5A2E 2735 892B 821C 871A 0411 94EA DB02 E193
krmed wrote:
UAC also uses heuristics to determine if an application needs admin privilege.
Yes that's it! The file is a
software_updater.exe, the text "update" in file name or version info triggers the "installer detection". Now have to find a way around that, I am curious if I can do the following: 1) keep file name without UAC prompt, 2) elevate privileges on runtime when actually needed. Most time my software updater justs needs to run with normal user rights, only when the main application is updated it would need more privileges. Btw, if someone is interested, I would have never mentioned the problem if my MSI installer wouldn't have failed. You can't run (non-deferred) custom actions which will then trigger a UAC prompt, they fail silently. Thanks for the info! :) -
// or is it some API call inside my exe which causes the UAC prompt? May be... ...when it (test) will not help : - save the XML-dump as c:\yours.manifest - set the exe-VS\ProjektProperty\Manifest Tool\Input and Output\Additional Manifest Files to c:\yours.manifest - rebuild An "admin" API call would just fail, I think, by filled LastError (about some rights) in the "non-admin" modus... :)
virtual void BeHappy() = 0;Thanks for the info! However, the manifest with trustinfo was not enough, also needed Win7 compability for UAC to work as wanted (they changed the rules for Win7). Didn't expect me to say that... but this mess wouldn't have happened with Bill Gates still being at Microsoft. :)