vista elevation question

[DBC User]

Hi all,

I have a quick question on vista elevation. I have 2 application, one
main GUI which user interacts with and another one is a tray program.
User have options to install products from the main GUI program, which
in turn writes the requests and pass it to the tray program. The tray
program will download and then runs the setup.exe in the background
without distrubing the user.

Here is my question, in the current model, whenever the tray program
try to launch the setup.exe for each product it is trying to install,
it will popup the UC ui. I want to minimize the number of popups to
user. Here is what I am thinking, when user select to install product
from the main GUI, somehow ask for the 'admin token' and then pass the
admin token also part of the request to the tray program and when it
try to run the setup.exe, it uses the admin token passed along with
the original request.

Well is it possible at all or is it possible to do it in another way?
by the way, tray program is automatically started out by the main gui,
if it is not running. Also I do not want to run the tray program in
admin token all the time.

Thanks.

 

[Guest]

If it were possible every application would do it to circumvent the security
of the UAC. When the UAC is enabled the user is telling Vista to request
permission to run each and every application that requires admin privledges,
unless it has been run before and they've told it not to request permission
again...

 

[DBC User]

If it were possible every application would do it to circumvent the security
of the UAC. When the UAC is enabled the user is telling Vista to request
permission to run each and every application that requires admin privledges,
unless it has been run before and they've told it not to request permission
again...

--
Browsehttp://connect.microsoft.com/VisualStudio/feedback/and vote.http://www.peterRitchie.com/blog/
Microsoft MVP, Visual Developer - Visual C#









- Show quoted text -

I am not actually circumventing the UAC at all. I am planning to put
shield on the option where the user is choosing to request the
install. I am going to ask the client to enter the credentials or
allow it to run thus getting the admin token and pass it to the actual
install process to use. Sorry if I misspoke.

 

[Guest]

The UAC pops up regardless of what credentials are used. That's the feature
of the UAC so you don't have to have multiple logins or always be logged in
as admin.

 

[DBC User]

I have to agree with Peter, while it may not seem like you would be
circumventing UAC you kind of would be. The problem with that would be what
if some malicious process/person finds a way to launch processes through
your app they will very likely be able to figure how to get that admin
token. Now your app is responsible for malware operating in an elevated
process without a user prompt. The idea sounds good, but it could easily
open holes.

-Matt Newman







- Show quoted text -

Thank you for the input and I will leave the process as it is.

One more question, is it possible to install one product once and then
all its update without UAC prompting? I read about that somewhere on
vista document. Any idea on that?
Thanks.

 

[Matthew Newman]

I have to agree with Peter, while it may not seem like you would be
circumventing UAC you kind of would be. The problem with that would be what
if some malicious process/person finds a way to launch processes through
your app they will very likely be able to figure how to get that admin
token. Now your app is responsible for malware operating in an elevated
process without a user prompt. The idea sounds good, but it could easily
open holes.

-Matt Newman