UAC and access to HKCR (Registry)

Posted: 01-04-2007, 04:26 PM

Michael Schwarz

Guest
Posts: n/a

Hi,

I have following problem: A simple file copy and COM registration tool
displays a dialog with "An unidentified program wants access to your
computer". I know that there are restricted user rights for administrators,
too, but is there any way to get rid of this messages (without having to
disable UAC)? I'm searching for something like using a certificate for this
application and put the certificate in the trusted publisher store. Using
makecert to test this doesn't work, maybe I did it wrong, is there any
step-by-step help?

Thanks for your help!

--
Best regards | Schöne Grüße
Michael

Microsoft MVP - Most Valuable Professional (ASP/ASP.NET)
Microsoft MCAD - Certified Application Developer

http://weblogs.asp.net/mschwarz/
http://www.ajaxpro.info/

Responses to "UAC and access to HKCR (Registry)"

Jimmy Brush

Guest
Posts: n/a

Re: UAC and access to HKCR (Registry)

Posted: 01-04-2007, 05:14 PM

Hello,

Any access to administrator-only areas such as HKLM will have to be done
from an elevated process. There is no way to specify that only that
particular application can elevate without prompting. This is to prevent
malicious applications from utilizing elevate-without-prompting applications
to elevate their own privileges.

Signing the file with a certificate may alter the appearance of the UAC
prompt (to make it appear less threatening), but it will not make the prompt
go away.

- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

Michael Schwarz

Guest
Posts: n/a

Re: UAC and access to HKCR (Registry)

Posted: 01-04-2007, 06:05 PM

Hi Jimmy,

thanks for your reply.

> Signing the file with a certificate may alter the appearance of the UAC
> prompt (to make it appear less threatening), but it will not make the
> prompt go away.

I tried to put a MSI file in the Active Directory, and this MSI file could
write to the HKCR. So, is this maybe the solution to put everything in a MSI
file instead?

Michael

Alun Jones

Guest
Posts: n/a

Re: UAC and access to HKCR (Registry)

Posted: 01-04-2007, 10:21 PM

"Jesper" <Jesper@discussions.microsoft.com> wrote in message
news:1AFCF951-93F4-4B4C-812E-C9EA07DF525C@microsoft.com...

> MSI files being plumbed down from AD are installed by the Windows
> Installer
> service (I think) which is already running elevated. That is why those do
> not
> require any kind of interaction.

Also, services don't get UAC - because a service generally has no user
interaction (which is a good thing), it will either have the right
privilege, or it won't have the right privilege to do a particular
operation.

Alun.
~~~~

LinkBack

Thread Tools

Display Modes

« Where the heck is the Local Security Policy? | IE7 protected mode »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Registry Access	Tim Gee	Windows Vista Security	6	11-28-2006 12:10 AM
Remote Registry Access using VB.NET to enumerate Installed Software Applications	Alan King	Windows XP WMI	2	11-19-2004 05:14 PM
Registry error prevents access to a Network drive	Jim Paget	Windows XP Accessibility	0	08-20-2003 01:05 AM
Can't access registry	Annette	Windows XP Accessibility	1	08-13-2003 07:55 PM
Unable to access registry in XP Pro	G Mulcaster	Windows XP New Users	3	08-13-2003 07:24 PM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90