question about uac shield icon

[TheOne]

I observe strange behavior of vista.

When I put a executable binary in a specific folder, it gains a uac
shield on its icon. When I double-click the icon, uac dialog appears.

When I put this same binary in other folder, for example, into the
desktop, or c:\, its shield is gone. I can start the executable
without any interruption.

The same binary can be put into another vista machine, into the
exactly same foler, but at this time, no uac shield is drawn.

I rename a txt file into the name and put it in that path, the uac
shield turns on.

What could cause this behavior? I suspect there's some uac-
configuration to enable or diable uac by execuatable path.

 

[TheOne]

UAC only allows applications from C:\Program Files and C:\Windows
access to the automatic-elevation prompt for programs (the shield), when
they are launched from locations like D:\ or other locations UAC uses
virtual paths and registry keys to give the applications fake
administrator privileges allowing them to function.

At this time Microsoft will not allow changes to most of UAC`s
functions or directory paths to be modified because ISV`s (Independent
Software Vendors) have informed Microsoft they would use the options to
disable or modify UAC to suit the own needs, there are some limited
options available in the Management Console.

1. Open the Start Menu.
2. In the white line (Start Search) area, type secpol.msc and press Enter.
3. In the left pane, click on Local Policies.
4. Click on Security Options.
5. In the right pane, scroll down to User Account Control.

Let me describe more details of my problem.

The folder that causes abnormality is none of the folders mentioned
above. It's something like C:\MyApp\ . I put my executable binaries
there.

I have three vista32 test machines. Only one of them causes this
problem.

Most strange thing is : When I rename any file (I tested txt, exe,
jpg, ...) into some-specific-name.exe, and put it into the folder in
question, then the shield appears on the icon and when double
clicking, the uac dialog appears. (The name doesn't includes "install"
nor "setup".)

I searched the registry for the some-specific-name and found nothing
relevant. I also looked around the secpol.msc but it doesn't resolve
my problem. (Am I missing something?)

 

[Jimmy Brush]

Hello,

Do you have a .manifest file with a file name of file.exe.manifest in that
location?

If so, Windows will read the manifrst file whenever file.exe is executed.
The manifest is what tells Windows whether to prompt for UAC or not. This
would explain why an .exe with that name would prompt from that folder but
not the others.

Windows is not path-sensitive when it comes to deciding when to show a UAC
prompt.

Windows does sometimes cache whether a specific application will require a
UAC prompt. If you have recently rebuilt the app or changed/modified a
..manifest file in that location, Windows may have cached the old behavior.
Logging off / back on or restarting should resolve it.

--
- JB
Microsoft MVP Windows Shell/User

UAC only allows applications from C:\Program Files and C:\Windows
access to the automatic-elevation prompt for programs (the shield), when
they are launched from locations like D:\ or other locations UAC uses
virtual paths and registry keys to give the applications fake
administrator privileges allowing them to function.

At this time Microsoft will not allow changes to most of UAC`s
functions or directory paths to be modified because ISV`s (Independent
Software Vendors) have informed Microsoft they would use the options to
disable or modify UAC to suit the own needs, there are some limited
options available in the Management Console.

1. Open the Start Menu.
2. In the white line (Start Search) area, type secpol.msc and press Enter.
3. In the left pane, click on Local Policies.
4. Click on Security Options.
5. In the right pane, scroll down to User Account Control.

Let me describe more details of my problem.

The folder that causes abnormality is none of the folders mentioned
above. It's something like C:\MyApp\ . I put my executable binaries
there.

I have three vista32 test machines. Only one of them causes this
problem.

Most strange thing is : When I rename any file (I tested txt, exe,
jpg, ...) into some-specific-name.exe, and put it into the folder in
question, then the shield appears on the icon and when double
clicking, the uac dialog appears. (The name doesn't includes "install"
nor "setup".)

I searched the registry for the some-specific-name and found nothing
relevant. I also looked around the secpol.msc but it doesn't resolve
my problem. (Am I missing something?)