How to elevate integrity for a guest account


  1. raamkri
    Posts : 3
    Windows 7
       New #1

    How to elevate integrity for a guest account


    Hi,

    We have an utility in our application that makes use of ActiveX and prints the document user needs from our repository in the background without user intervention. For this we used to download the document to the Temp folder, which we got using the windows API gettemppath(), and after this, the print is fired from this location.

    This utility works fine on Windows XP. But fails on Windows Vista and Windows 7. Found out that this is because of the protected mode feature present in windows vista and higher OS. True to this, the utility works fine if i add our site to the trusted sites list, or run the application as an administrator or when i disable the protected mode.

    We don't expect our users to be able to do any of the above changes themselves. so, we are investigating on finding a way to make this work without straining our users. we are OK with changing the code too.

    I understand that there is a way by which i can elevate the event by using a broker process. but, i sense that it needs admin privileges for that to happen. Is there a way by which i can ensure that a guest user ( i.e, Non Admin ) can use the utility without fail ? code change or otherwise !

    I would be really thankful to anyone who can help me out with this. Please let me know if anymore detail is needed

    Thanks
      My Computer
    Quote Quote

  3. Johnathan Lyman
    Posts : 966
    Windows 7 Ultimate 64-bit
       New #2

    The first thing I would look into [and personally my expertise in this area is very slim] group policies for the user(s) in question. Using Group Policies, you can set very specifically what the user can and cannot do, so you don't have to put them in a generalized "guest" account.

    Unfortunately I am not that great in that area and someone else may need to step in from here if they know more.
      My Computer
    Quote Quote

 

  Related Discussions
I have numerous entries reading: Event ID 3002 Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\sxs.dll because the set of per-page image hashes could not be found on the system. I checked the eventlog around the moment it started. ...
So this is probably the strangest problem I have ever encountered with Windows 7. About two or three months ago, I noticed that my user account had suddenly changed into a guest account. I get prompted for an administrator password when trying to do any tasks that require administrator privilege....
Hi all.. Just wondering.. is it possible for me to set my guest account similar as my primary account but with several file or folder or software in my primary account , cant be access in my guest account? means i still can instll the new software, or application, and still can save new document...
My friend and I share my laptop. Recently I found out that he was watching porn on my computer. So I promptly confronted him, and told him to stop. Weeks later, he did it again. So I downloaded Norton's Safety Minder to prevent it. So this sneaky prick goes around and enables the guest account, and...
So I have an administrator account for maintenance purposes and I also have my frequently used standard account. Usually, when you right click on a program, for example: Spybot S&D There is an option to "Run as Administrator". And if you click it, it prompts for an admin password.
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 05:09.
Find Us