What does the security shield mean??

[Guest]

What does the security shield mean thats appeared next to the short cut
symbol on my desktop icon? What is the

significance of it? It appears on the same application icon regardless of
whether the user is nominally an administrator

or standard user..

When I run using the Admin account I get a "An unidentified program wants
acess to the computer" message.. Allow or

Cancel.. select Allow and it runs ok.. Is this running as Admin or Standard
now??

When using a Standard user selecting the applications I get the same "An
unidentified program wants acess to the

computer" message.. and I have to enter an Admin password... it then runs ok

If in both senarios its running with elevated (Admin) permissions how do I
make my application run as a standard user so

that the UAC fires the "An unidentified program wants...yada" message with
the Allow Cancel options rather than having

to enter the Admin password.

I guess I am missing something here.. so all help greatly appreciated.

Nick

 

[Josh]

Nick.

The security sheild is indicative of a UAC prompt. Any time you see that
shield the result of clicking on that thing with a non-admin id or a
Protected admin ID should be an prompt. Either a concent prompt (the allow)
or a prompt for credentials (Cred UI)

If you are using the build in administrator account (not the one you created
during setup) then you won't see any prompts as UAC is disabled for that
account.


After an Allow prompt the token is refactor (basically they add the admin
creds to you token) to be an admin and the resulting process is running as
administrator.

If you are using a standard user they do not have the admin token in their
full token so you can't refactor your app. If you app has need for admin
operations you should split that portion out into something else that
possibly runs as local system if that is your desire as you won't be able to
elevate without a prompt for creds from a standard user.

If you application doesn't have need for admin rights and it is prompting
anyway then you can manifest the file to get rid of the prompt. here is a
link with some info on manfiest files.

http://windowsconnected.com/blogs/jerry/archive/2005/12/21/97.aspx

 

[Colin Barnhorst]

Nice explanation, Josh.

Nick.

The security sheild is indicative of a UAC prompt. Any time you see that
shield the result of clicking on that thing with a non-admin id or a
Protected admin ID should be an prompt. Either a concent prompt (the
allow) or a prompt for credentials (Cred UI)

If you are using the build in administrator account (not the one you
created during setup) then you won't see any prompts as UAC is disabled
for that account.


After an Allow prompt the token is refactor (basically they add the admin
creds to you token) to be an admin and the resulting process is running as
administrator.

If you are using a standard user they do not have the admin token in their
full token so you can't refactor your app. If you app has need for admin
operations you should split that portion out into something else that
possibly runs as local system if that is your desire as you won't be able
to elevate without a prompt for creds from a standard user.

If you application doesn't have need for admin rights and it is prompting
anyway then you can manifest the file to get rid of the prompt. here is a
link with some info on manfiest files.

http://windowsconnected.com/blogs/jerry/archive/2005/12/21/97.aspx