Windows Vista - Directory Name is Invalid

[dman]

I recently purchased a new Laptop. The preloaded OS is Windows Vista
Business edition. UAC is enabled. I have only one user created and as
far as I have read on UAC it is operating as the "psudo admin" =
Regular user that can elevate processes to administrator rights.

The below exe test were done with multible install exe files.
examples: Adobe Acrobat 8 installer, Spybot S&D installer

I've tried to be thurough in my testing so I can give the best
description of the problem.

Double click of any exe in any directory = Message "[insert directory
name here] Directory Name is invalid"

Right click and run as administrator = Message "[insert directory name
here] Directory Name is invalid"

Double click of any exe in any network share = Message "[insert
directory name here] Directory Name is invalid"

Double click of any exe placed under c:\program files\* directory =
Elevation Prompt and install continues

Using an elevated CMD box to run an exe anywhere but c:\program files
\* = Elevation Prompt and install continues

Using an elevated CMD box to run an exe from c:\program files\* =
Elevation Prompt and install continues


It seems to me that UAC is responsible for denying the exes to perform
their installtions when they do not reside under the c:\program files
\* directory. I can't seem to find where I might be able to change
that behavior.

Anyone have any ideas?

Thanks,
Donovan

 

[dman]

I found this information on Technet and it seems to explain this
problem.

User Account Control: Only elevate UIAccess applications that are
installed in secure locations
There are two possible values:

· The system will only give UIAccess privileges and user rights to
executables that are launched from under %ProgramFiles% or %windir%.
The ACLs on these directories ensure that the executable is not user-
modifiable (which would otherwise allow elevation of privilege).
UIAccess executables launched from other locations will launch without
additional privileges (i.e. they will run "asInvoker").

· Disabled - The location checks are not done, so all UIAccess
applications will be launched with the user's full access token upon
user approval.

Default = Enabled

Supposedly this option is access via the secpol.msc snap-in. I do not
know how to access or get to that but I think I could and then change
that option to disabled it would solve the problem.

Please reply if you know how to get to this option.

Thanks,
Donovan