Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: impossible to change privilege level of an app ?

02 Jul 2010   #1
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 
impossible to change privilege level of a program ?

hi !

a few days ago a-squared began asking for elevated privilege, W7 showing an UAC-prompt everytime a-squared started a scheduled scan or i opened the GUI.

i checked the properties of a2start.exe which is the main file, under compatibility, the privilege level is set to "Run as admin".

iīve tried to change it by using "Change settings for all users", but when it starts it doesnīt show the "Run as admin" as marked.

i tried to mark it, and then to unmark, but after clicking ok, itīs still marked as "Run as admin".

i switched to my admin-account and checked the file, it is NOT marked !
itīs only marked on my USER-account...

how do i change that ?


My System SpecsSystem Spec
.

02 Jul 2010   #2
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

It's likely because A Squared updated the version a couple of days ago. Have you tried turning off UAC and attempting the same thing from the Admin account? You may be well served to reinstall and run the installer as admin. For some reason, UAC sees the new version, and doesn't recognize it's admin authority. Mine doesn't even have run as admin checked, and no problems. A Guy
My System SpecsSystem Spec
02 Jul 2010   #3
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

perhaps you missed this above: "i switched to my admin-account and checked the file, it is NOT marked !
itīs only marked on my USER-account..."

i already asked about it on Emsisoftīs forum, a2Âīs now requires to run elevated ( UAC-prompt ) ? - Emsisoft Support

got a very quick reply from the Developer himself, it took 4 minutes, can you believe that ?
MINUTES, not hours or days....
WOW !

and he didnīt mention any changes in a2.
i also have Windows Server 2008 installed, and of course i also use a2 with WS-2008.
so i shutdown W7 & started WS-2008 instead, also running on a normal USER-account,
after having updated a2 to the same version as on W7 i did same tests,
on WS-2008 a2 behaves exactly as before, no elevation required, no UAC-prompt.

on WS-2008 a2start.exe is NOT marked as "Run this program as administrator",
so itīs definitely a problem with my W7-system.

i donīt think you really understand the problem, because as i see it, itīs not a problem with UAC, the problem is that the file has somehow got changed privileges.

and the installer of course runs as admin, because it requires admin-rights...
My System SpecsSystem Spec
.


02 Jul 2010   #4
Barman58

Windows 8.1 Pro x64 x3 + Windows 10 Preview, Ubuntu
 
 

Would running the executable at start-up via the scheduler with "run with highest privileges" work in this case - just an idea as it should take away link to a particular user profile
My System SpecsSystem Spec
02 Jul 2010   #5
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

hmmm, taskscheduler as admin or user ?
My System SpecsSystem Spec
03 Jul 2010   #6
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Quote   Quote: Originally Posted by hackerman1 View Post
hi !

a few days ago a-squared began asking for elevated privilege, W7 showing an UAC-prompt everytime a-squared started a scheduled scan or i opened the GUI.

i checked the properties of a2start.exe which is the main file, under compatibility, the privilege level is set to "Run as admin".

iīve tried to change it by using "Change settings for all users", but when it starts it doesnīt show the "Run as admin" as marked.

i tried to mark it, and then to unmark, but after clicking ok, itīs still marked as "Run as admin".

i switched to my admin-account and checked the file, it is NOT marked !
itīs only marked on my USER-account...

how do i change that ?
Maybe I am missing something here, so I read this 3 times, plus read the part you posted on a2 web site.

Instead of playing with the "Change settings for all users", mark and unmark, why not turn off compatibility mode all together?

Plus you were saying you are running the application from a shortcut, why not delete the shortcut and make a new one??

Maybe some screen shots would help; you know picture is worth a thousand words.
My System SpecsSystem Spec
03 Jul 2010   #7
Bill2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

You can get rid of the UAC prompt, at least when opening the GUI by creating an elevated shortcut.

Elevated Program Shortcut without UAC Prompt - Create
My System SpecsSystem Spec
03 Jul 2010   #8
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

yes i know, but i want to know how to change privilege level...
My System SpecsSystem Spec
03 Jul 2010   #9
Barman58

Windows 8.1 Pro x64 x3 + Windows 10 Preview, Ubuntu
 
 

Ok my understanding of this as a non programmer is that we are dealing with two levels of "Privilege" here.

There are the actual file permissions which are part of the NTFS file system. These are fully controllable via the methods we all know, (and love ). This system is the same as it has been since the first days of NT. There is also the "privilege" level that an application needs to manipulate the objects it works with.

The facts are now complicated by the addition of UAC into the mix, and it's use of the dual token system for administrators, plus the fact that the Privilege level required for the running of an application is set in the program code. Some programs will trigger the UAC prompt whatever is set in the compatibility mode settings. This is triggered by the program itself or by the security system when the program attempts to access an object that requires a higher privilege level the the one it is running at.

Without changing the actual code of the application, and the ACL's of all files that may be accessed by the application, all we can do at a user level are workarounds, to prevent the trigger of the UAC prompt, the application must run at the privilege level it requires to access and change the files it uses.

The "Admin Shortcut" mentioned above is probably the most useful for system type applications, as the trigger in the Task Scheduler may be set to system start or user login (Standard or Admin).

This is of course my simplistic understanding of this and any of our accomplished programmers here will be able to explain this much more clearly
My System SpecsSystem Spec
04 Jul 2010   #10
TimStitt

Windows 7 Ultimate 64 bit
 
 

Hi hackerman1,

What if the issue is a change in your PC's config, not Emisofts'? Check secpol.msc User account control settings, especially two in the screen prints I took below. The pics show the defaults for Windows 7.

I'll have a bit of a think and see what else sprigs to mind, will let you know if I come up with something.

PS: I know you said you haven't changed anything; but please check anyway; besides you may be able to massage your settings here to make it work (balance that with security of course ).


Attached Thumbnails
-secpol.jpg  
My System SpecsSystem Spec
Reply

 impossible to change privilege level of an app ?




Thread Tools





Similar help and support threads
Thread Forum
Compatibility Privilege Level setting will not take
Hello I hope I chose the right sub for this question. I have been running Visual Studio as an administrator for quite a long time. The first time I launched it as an administrator, Windows remembered the setting and it's been that way ever since, which was actually a nice feature up until all...
System Security
Can I change gamepad buttons at driver level?
Hi guys and gals, I have a slight problem and I wanted to ask you for help... I recently installed Matrix: The Path of Neo, which is a great game, but its PC port is horrible. The problem is, the game detects any gamepad and maps its buttons automatically, with no options to change the...
Gaming
Low system sound level, high music level?
Is there a chance do define two different audio levels? I guess I am not the only one listening to music with my computer - so I'd like to avoid awkward and looooud system sounds while turning up my stereo... is there a chance to do so? I know that apple has it, not sure bout win7... thx
Sound & Audio
How to see privilege level of programs?
Is there any way to see the privilege level (admin or standard) of the programs running? Thought that maybe Task Manager or Process Expolorer might have a column to show that but they don't seem to have it.
General Discussion
How to Change volume level only with mousewheel
To change the volume level on Linux just put the little arrow-click on the audio icon on the taskbar and use the mouse wheel without having to click. This is possible in Windows Seven, changing some configuration in the system?
Sound & Audio
Internet Explorer Content Advisor - Change Ratings Level
How to Change Ratings Level in Internet Explorer Content Advisor Content Advisor uses ratings that websites provide to identify potentially offensive content. This will show you how to change the category rating levels to what level you want instead. By default, Internet Explorer is set for...
Tutorials

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Đ Designer Media Ltd

All times are GMT -5. The time now is 01:25.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App