Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: impossible to change privilege level of an app ?


02 Jul 2010   #1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 
impossible to change privilege level of a program ?

hi !

a few days ago a-squared began asking for elevated privilege, Windows 7 showing an UAC-prompt everytime a-squared started a scheduled scan or i opened the GUI.

i checked the properties of a2start.exe which is the main file, under compatibility, the privilege level is set to "Run as admin".

iīve tried to change it by using "Change settings for all users", but when it starts it doesnīt show the "Run as admin" as marked.

i tried to mark it, and then to unmark, but after clicking ok, itīs still marked as "Run as admin".

i switched to my admin-account and checked the file, it is NOT marked !
itīs only marked on my USER-account...

how do i change that ?

My System SpecsSystem Spec
.

02 Jul 2010   #2

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

It's likely because A Squared updated the version a couple of days ago. Have you tried turning off UAC and attempting the same thing from the Admin account? You may be well served to reinstall and run the installer as admin. For some reason, UAC sees the new version, and doesn't recognize it's admin authority. Mine doesn't even have run as admin checked, and no problems. A Guy
My System SpecsSystem Spec
02 Jul 2010   #3

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

perhaps you missed this above: "i switched to my admin-account and checked the file, it is NOT marked !
itīs only marked on my USER-account..."

i already asked about it on Emsisoftīs forum, a2Âīs now requires to run elevated ( UAC-prompt ) ? - Emsisoft Support

got a very quick reply from the Developer himself, it took 4 minutes, can you believe that ?
MINUTES, not hours or days....
WOW !

and he didnīt mention any changes in a2.
i also have Windows Server 2008 installed, and of course i also use a2 with WS-2008.
so i shutdown Windows 7 & started WS-2008 instead, also running on a normal USER-account,
after having updated a2 to the same version as on Windows 7 i did same tests,
on WS-2008 a2 behaves exactly as before, no elevation required, no UAC-prompt.

on WS-2008 a2start.exe is NOT marked as "Run this program as administrator",
so itīs definitely a problem with my Windows 7-system.

i donīt think you really understand the problem, because as i see it, itīs not a problem with UAC, the problem is that the file has somehow got changed privileges.

and the installer of course runs as admin, because it requires admin-rights...
My System SpecsSystem Spec
.


02 Jul 2010   #4

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

Would running the executable at start-up via the scheduler with "run with highest privileges" work in this case - just an idea as it should take away link to a particular user profile
My System SpecsSystem Spec
02 Jul 2010   #5

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

hmmm, taskscheduler as admin or user ?
My System SpecsSystem Spec
03 Jul 2010   #6

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Quote   Quote: Originally Posted by hackerman1 View Post
hi !

a few days ago a-squared began asking for elevated privilege, Windows 7 showing an UAC-prompt everytime a-squared started a scheduled scan or i opened the GUI.

i checked the properties of a2start.exe which is the main file, under compatibility, the privilege level is set to "Run as admin".

iīve tried to change it by using "Change settings for all users", but when it starts it doesnīt show the "Run as admin" as marked.

i tried to mark it, and then to unmark, but after clicking ok, itīs still marked as "Run as admin".

i switched to my admin-account and checked the file, it is NOT marked !
itīs only marked on my USER-account...

how do i change that ?
Maybe I am missing something here, so I read this 3 times, plus read the part you posted on a2 web site.

Instead of playing with the "Change settings for all users", mark and unmark, why not turn off compatibility mode all together?

Plus you were saying you are running the application from a shortcut, why not delete the shortcut and make a new one??

Maybe some screen shots would help; you know picture is worth a thousand words.
My System SpecsSystem Spec
03 Jul 2010   #7

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

You can get rid of the UAC prompt, at least when opening the GUI by creating an elevated shortcut.

Elevated Program Shortcut without UAC Prompt - Create
My System SpecsSystem Spec
03 Jul 2010   #8

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

yes i know, but i want to know how to change privilege level...
My System SpecsSystem Spec
03 Jul 2010   #9

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

Ok my understanding of this as a non programmer is that we are dealing with two levels of "Privilege" here.

There are the actual file permissions which are part of the NTFS file system. These are fully controllable via the methods we all know, (and love ). This system is the same as it has been since the first days of NT. There is also the "privilege" level that an application needs to manipulate the objects it works with.

The facts are now complicated by the addition of UAC into the mix, and it's use of the dual token system for administrators, plus the fact that the Privilege level required for the running of an application is set in the program code. Some programs will trigger the UAC prompt whatever is set in the compatibility mode settings. This is triggered by the program itself or by the security system when the program attempts to access an object that requires a higher privilege level the the one it is running at.

Without changing the actual code of the application, and the ACL's of all files that may be accessed by the application, all we can do at a user level are workarounds, to prevent the trigger of the UAC prompt, the application must run at the privilege level it requires to access and change the files it uses.

The "Admin Shortcut" mentioned above is probably the most useful for system type applications, as the trigger in the Task Scheduler may be set to system start or user login (Standard or Admin).

This is of course my simplistic understanding of this and any of our accomplished programmers here will be able to explain this much more clearly
My System SpecsSystem Spec
04 Jul 2010   #10

Windows 7 Ultimate 64 bit
 
 

Hi hackerman1,

What if the issue is a change in your PC's config, not Emisofts'? Check secpol.msc User account control settings, especially two in the screen prints I took below. The pics show the defaults for Windows 7.

I'll have a bit of a think and see what else sprigs to mind, will let you know if I come up with something.

PS: I know you said you haven't changed anything; but please check anyway; besides you may be able to massage your settings here to make it work (balance that with security of course ).


Attached Thumbnails
impossible to change privilege level of an app ?-secpol.jpg  
My System SpecsSystem Spec
Reply

 impossible to change privilege level of an app ?




Thread Tools



Similar help and support threads for2: impossible to change privilege level of an app ?
Thread Forum
How to change volume level audio >scale< in windows? Sound & Audio
[W7 ULT] Impossible to change "Power button/lit action" ? Performance & Maintenance
Can I change gamepad buttons at driver level? Gaming
Changing batch privilege level General Discussion
How to see privilege level of programs? General Discussion
How to Change volume level only with mousewheel Sound & Audio
Internet Explorer Content Advisor - Change Ratings Level Tutorials

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Đ Designer Media Ltd

All times are GMT -5. The time now is 11:49 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33