UAC dialog box

Posted: 01-27-2008, 03:22 AM

A long winded question.

In Windows XP and 2000, one can write an application that performs a
ShellExecute with the "runas" verb to launch the Run As dialog box. I
have extended this to then automate the dialog by clicking the run as
another use radio button, filling in the user name and the password,
etc. as dictated by command line options.

In Vista, the Run As dialog looks completely different and I suspect MS
has secured the dialog so that it cannot be automated via SendMessage
calls (let alone that it doesn't look like a traditional dialog). Does
anyone know if this is true, or can the Vista RunAs dialog be automated
as in XP and W2K ?

The reason I ask is that I would like to control the which user is
selected instead of having to click down the list in the Vista dialog...

Toad

--

UAC dialog box


Responses to "UAC dialog box"

Jesper
Guest
Posts: n/a
 
RE: UAC dialog box
Posted: 01-27-2008, 07:06 AM
Sorry, you can't do that. The dialog is on the secure desktop and you cannot
send Window Messages to it from a user mode application. It is actually there
specifically to prevent user mode applications from sending Window Messages
to it. The ability to send those messages to a sensitive application is known
as a "Shatter Attack" and was the cause of many security bulletins and
updates in the Windows XP era.

If you had a service on the secure desktop already you might be able to
control it. I haven't actually tried that. That would not be a vulnerability
because you already have trusted code on the box in that case.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"Toad" wrote:
>
> A long winded question.
>
> In Windows XP and 2000, one can write an application that performs a
> ShellExecute with the "runas" verb to launch the Run As dialog box. I
> have extended this to then automate the dialog by clicking the run as
> another use radio button, filling in the user name and the password,
> etc. as dictated by command line options.
>
> In Vista, the Run As dialog looks completely different and I suspect MS
> has secured the dialog so that it cannot be automated via SendMessage
> calls (let alone that it doesn't look like a traditional dialog). Does
> anyone know if this is true, or can the Vista RunAs dialog be automated
> as in XP and W2K ?
>
> The reason I ask is that I would like to control the which user is
> selected instead of having to click down the list in the Vista dialog...
>
> Toad
>
> --
>
>
Steve Easton
Guest
Posts: n/a
 
Re: UAC dialog box
Posted: 01-27-2008, 05:14 PM
With Vista you need to use a manifest to either tell Vista to run as invoker,
highestavailable or AsAdministrator.

Preferably an embedded manifest at that, here's a sample:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2">
<ms_asmv2:security>
<ms_asmv2:requestedPrivileges>
<ms_asmv2:requestedExecutionLevel level="asInvoker">
</ms_asmv2:requestedExecutionLevel>
</ms_asmv2:requestedPrivileges>
</ms_asmv2:security>
</ms_asmv2:trustInfo>
</assembly>

Here's some links:
Understanding and Configuring User Account Control in Windows Vista
http://technet2.microsoft.com/Window....mspx?mfr=true

The Windows Vista and Windows Server 2008 Developer Story: Windows Vista Application Development Requirements
for User Account Control (UAC)
http://msdn2.microsoft.com/en-us/lib...#wvduac_topic6

--

Steve Easton


"Toad" <toad@sky.net> wrote in message news:5OSmj.81543$L%6.19300@bignews3.bellsouth.net. ..
>
> A long winded question.
>
> In Windows XP and 2000, one can write an application that performs a
> ShellExecute with the "runas" verb to launch the Run As dialog box. I
> have extended this to then automate the dialog by clicking the run as
> another use radio button, filling in the user name and the password,
> etc. as dictated by command line options.
>
> In Vista, the Run As dialog looks completely different and I suspect MS
> has secured the dialog so that it cannot be automated via SendMessage
> calls (let alone that it doesn't look like a traditional dialog). Does
> anyone know if this is true, or can the Vista RunAs dialog be automated
> as in XP and W2K ?
>
> The reason I ask is that I would like to control the which user is
> selected instead of having to click down the list in the Vista dialog...
>
> Toad
>
> --
>

 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
MFC dialog and XPe Larry Waibel Windows XP Embedded 2 04-27-2005 01:03 AM
dialog box vr Windows XP Printers / Scanners / Fax 0 12-12-2003 08:26 AM
Dialog Box Allen Stevens Windows XP Help & Support 1 11-13-2003 01:09 AM
Dialog Box Stoney Bishop Windows XP Basics 7 11-07-2003 03:55 AM
no ok in dialog box Phillip Sheesley Windows XP Basics 0 08-25-2003 10:16 PM