User Account Control - UAC - Change Notification Settings

Page 8 of 8 FirstFirst ... 678

  1. Posts : 37
    Windows 7 Ultimate 32 bit
       #70

    Brink said:
    Hello Alan,

    I tested with that secpol disabled, and I still get prompted by UAC, and still have get UAC shield on old or newly created elevated program shortcut icons.

    Whether it's an elevated program (ex: DeviceProperties.exe) or installer (ex: IconViewer) , UAC still prompts me.
    I may have missed the lead up to your question.

    If the program is an actual install program then you will get prompted (that "setup" information is contained in the program's manifest, not in its name). The list of names that are auto-identified as installers is in the registry somewhere. Just search for the string "setup.exe" and you'll find one or more settings.

    Also anything ".msi" will initiate and execute the "installer services" (there are two of them) which can elevate a lowly installer exe to "Act As System" (TCB) access.

    That, by the way, can be disabled by removing all permissions from a file called WUDFHost.exe (Windows Universal Device Foundation Host I think, but I can't look at it right now).

    Many programs take advantage of WUDFHost, through a component-based setup scheme called "ComSysApp" (Component As System Application) that allows user mode programs to install device drivers on the fly. Microsoft does it all the time.

    And some not so trustworthy installers have copied Microsoft's example to give themselves NT AUTHORITY SYSTEM access during the setup phase. All you need to do is say "yes" at the UAC prompt. The Freemake company is one example I know of which does that and installs for itself eternal system level access via components for use when needed.

    - Alan
      My Computer


  2. Posts : 71,291
    64-bit Windows 10 Pro
    Thread Starter
       #71

    Ah, ok.
      My Computer


 
Page 8 of 8 FirstFirst ... 678

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 19:55.
Find Us