Re: Manifests and requestedExecutionLevel


"Joseph M. Newcomer" <newcomer@xxxxxxxxxxxx> wrote in message
news:lf879399hnga0ujpqkvjt4n7ts357n2q9q@xxxxxxxxxx
Yes, the problem is that it takes a while to get to the state where the
level is
determined, and it involves a fair amount of work to launch a new process
with the correct
level and get it back to the right state.

Seems like manifests aren't really well-thought-out in terms of what they
can specify, and
certainly aren't documented.

Joe,
All aspects of UAC seem to be poorly documented at the moment. I personally
believe it is because UAC was not really ready at release time. You can
easily find some non-critical bugs. This leads me to believe that there are
potentially many critical bugs under the surface that people have yet to
find.

So far, I think that the majority of the "bugs" that I have found with UAC
have been due to the counterintuitive manner in which the various UAC
components work and fit together and the poor documentation.

For example, in your case, you are looking for a way to reduce the MIC level
via the manifest. It can be done using uiAccess="false" within the
requestedExecutionLevel element in the manifest. Unfortunately, by doing
this within the manifest you do not get the fine-grained control that you
most likely desire. You cannot set uiAccess="SECURITY_MANDATORY_MEDIUM_RID"
or anything that looks remotely like the constants used when
programmatically setting/querying the MIC level.


In short, I share your frustration!


I keep hoping that someone from Microsoft is reading these posts and takes
back to the
appropriate groups that we are complaining about poor documentation.

I hope so...

-Pete


.

Relevant Pages

  • Re: Problem with Vista and VB6, will run under user but not admini
    ... So I would try running it with a manifest. ... If that makes no differences you need to look at the code, perhaps in conjunction with process monitor: ... > We ran a test disabling virtualization from uac and the same thing ... > user worked, admin or UAC off, application no where to be seen except> on ...
    (microsoft.public.vb.general.discussion)
  • Re: Nach Konvertierung VC6 --> VC2008 Manifestproblem
    ... Generate Maifest - Yes: ... Additional Manifest Dependencies - ... Enable UAC - Yes ...
    (microsoft.public.de.vc)
  • Re: Problem with Vista and VB6, will run under user but not admini
    ... When you say disabled virtualization, do you mean adding a manifest? ... Also have you tried adding a manifest to the exe to ensure it doesn't use ... > normally with UAC on and under user but when you try to use it without> UAC ... > activex and I have installed the vista activex components. ...
    (microsoft.public.vb.general.discussion)
  • Re: Vista UAC
    ... ich beobachte seltsame Erscheinungen bei meinem Vista Business (bin ... Deshalb habe ich ein Manifest dazugelegt ... Wenn UAC ein ist, bekomme ich beim Versuch, ... startet das Programm, auch ohne die Meldungen "Ein nicht identifiziertes ...
    (microsoft.public.de.vb)