A referral was returned from the server.??
-
Hi Kushagra, Could you paste the contents of your manifest file into the forum? Best Wishes, -David Delaune
<!-- Identify the application security requirements./> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"/> <security> <requestedPrivileges> <requestedExecutionLevel level="requireAdministrator" uiAccess="false"/> requestedPrivileges/> </security> </trustInfo>
-
<!-- Identify the application security requirements./> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"/> <security> <requestedPrivileges> <requestedExecutionLevel level="requireAdministrator" uiAccess="false"/> requestedPrivileges/> </security> </trustInfo>
-
Hi, Your requestedPrivileges tag is not closed properly. Is this a forum-only typo? Best Wishes, -David Delaune
yes Its was a typo here only and not in the original manifest file
-
yes Its was a typo here only and not in the original manifest file
-
Hi, Other than that I don't see anything wrong. Could you check the machine and see if ValidateAdminCodeSignatures[^] is defined as 0x1? Is this a workstation subject to domain policy? Best Wishes, -David Delaune
No the workstation is not subject to domain policy ,.. the only this is that UAC is enabled on the machine ..
-
Hi, Other than that I don't see anything wrong. Could you check the machine and see if ValidateAdminCodeSignatures[^] is defined as 0x1? Is this a workstation subject to domain policy? Best Wishes, -David Delaune
Randor wrote: see if ValidateAdminCodeSignatures[^] is defined as 0x1? Hi randor, After cahnging this value to 0 I was able to run the application , but before that I was presented the dialog that UAC does asking user to allow the executable to run with Admin permission . can this dialog be emitted permanently ??? Kushagra
-
Randor wrote: see if ValidateAdminCodeSignatures[^] is defined as 0x1? Hi randor, After cahnging this value to 0 I was able to run the application , but before that I was presented the dialog that UAC does asking user to allow the executable to run with Admin permission . can this dialog be emitted permanently ??? Kushagra
Kushagra Tiwari wrote:
can this dialog be emitted permanently ???
Well I have no idea what you just asked me. But I think your asking if the registry key can be changed permanently. Yes you can just keep ValidateAdminCodeSignatures[^] defined as zero. This simply tells the operating system that executables do not need to be signed to be elevated. You have another option. You can change the value back to 0x1 and sign your application. Introduction to Code Signing[^] Best Wishes, -David Delaune
-
Kushagra Tiwari wrote:
can this dialog be emitted permanently ???
Well I have no idea what you just asked me. But I think your asking if the registry key can be changed permanently. Yes you can just keep ValidateAdminCodeSignatures[^] defined as zero. This simply tells the operating system that executables do not need to be signed to be elevated. You have another option. You can change the value back to 0x1 and sign your application. Introduction to Code Signing[^] Best Wishes, -David Delaune
Sorry for the typo again :) ..Actually what I had asked you was . Is there a way that for my executable with elevated permissions that windows UAC never asks user about allowing or disallowing my process and it simply allows the exe to be executed.. Kushagra
-
Sorry for the typo again :) ..Actually what I had asked you was . Is there a way that for my executable with elevated permissions that windows UAC never asks user about allowing or disallowing my process and it simply allows the exe to be executed.. Kushagra
-
No that would break the new UAC security model. Your application will be subject to UAC elevation prompts. The user can modify the behavior of the UAC and disable these prompts if desired. Best Wishes, -David Delaune
And if my sign and timestamp my executable with a certificate and install the certificate on the VISTA or Windows 2008 client in Trusted publishers , then would this UAC prompt me or will it directly allow me to execute on being invoked ? Kushagra
-
And if my sign and timestamp my executable with a certificate and install the certificate on the VISTA or Windows 2008 client in Trusted publishers , then would this UAC prompt me or will it directly allow me to execute on being invoked ? Kushagra
Hi Kushagra, I think the UAC prompt will appear. Although executables signed by Microsoft on Windows 7 can use an autoElevate flag which *does* bypass this UAC prompt. The internal details about this seem to be undocumented. I do not know if it works with third-party trusted signers. Best Wishes, -David Delaune