View Single Post
Old 07-26-2006   #2 (permalink)
Alan Adams


 
 

Re: UAC problem of .cpl file

dispaly name <dispalyname@discussions.microsoft.com> wrote:

> as we all know some app need Elevation by default,we can config the .manifest
> file to do so .
> but i can't config the .manifest file of the .cpl, or my cpl can't Elevation
> with the manifest ;
> i find some sys cpl can do this ,such as the Windows Firewall ,Add Hardware .
> i want to Double-click the shotcut of my xxx.cpl in the Control Panel and
> see the Elevation dialog .


A CPL is a DLL, and there isn't any elevation activity that occurs in
response to just a LoadLibrary(). Process (EXEs) and COM objects can
be launched with elevation required, and is what the control panel
applet would have to do.

At least for the items its allows configuration of that will require
elevation. (i.e. Maybe not everything a control panel applet shows
requires elevation just to show it, but may require elevation to
actually modify the information.)

"Control Panel" topics and the spawning of an elevated EXE or COM
object from otherwise non-elevated code is discussed in at least these
Vista security-related documents:

The Windows Vista Developer Story: Application Compatibility Cookbook
http://msdn.microsoft.com/library/en...ml/AppComp.asp

Developer Best Practices and Guidelines for Applications in a Least
Privileged Environment
http://msdn.microsoft.com/library/en...cProtVista.asp

http://msdn.microsoft.com/windowsvis...ence/security/

Alan Adams
My System SpecsSystem Spec