UAC turned off + administrator required

[Tischnoetentoet]

Hi all,

I want to launch an application on Vista which requires administrator rights (but has the asInvoker manifest option). However, when UAC is disabled, I cannot elevate the process using runas in shellexecute.

How should I run an application as administrator when UAC is turned off / disabled?

Thanks!

[Ajay Vijay]

You mean the UAC is disabled for the System or for your process (through linker option).

If the UAC is disabled, Administrator logged in will always be granted highest (elevated) privelege. If non-Admin is logged in, you would not be granted any privelege by OS.

Try using LogonUser and then run process in that user's security token.

[Tischnoetentoet]

I mean when UAC is completely disabled / turned off on the system.

I tried CreateProcessWithLogonW, but that seems to fail. Maybe I should try again...

[Ajay Vijay]

Are you logging and creating the process on user who has Admin rights?

There are Group Policy settings that effect UAC on Vista.

[Tischnoetentoet]

Yes, I had someone try it for me, but I will check it out myself first before moving any further.

[Ajay Vijay]

And do let us know the solution. Atleast others would benefit from it.
You know UAC technology is new in market. Google's hit would point to this thread, which will benefit Codeguru.com. Eventually Brad will give more out of prize distribution to monthly winners - which would definitely benefit you someday.

[HanneSThEGreaT]

As I understand, Maybe these will be useful :

http://www.codeguru.com/cpp/security...php/c13695__1/

http://codefromthe70s.org/vistatutorial.asp

[dingo_kasper]

As I understand, Maybe these will be useful :

http://www.codeguru.com/cpp/security...php/c13695__1/

http://codefromthe70s.org/vistatutorial.asp

thanks HanneSThEGreaT
the links that you provided are very useful!
one Good link i found
http://www.cs.auckland.ac.nz/~pgut00...ista_cost.html

With Regards

[Tischnoetentoet]

When the user is guest, and you want to start an application, this can be accomplished by using CreateProcessWithLogonW.

However, the reason it was failing on my side was because my administrator (me, I am the only user using the computer) has a blank password. That is not allowed by default in Windows Vista. Therefore, the function returns 1327 which means that a blank password has been used.

I hope this information is useful for others in the future.