Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista account administration

Vista - Adding a manifest to a legacy app (from an administrators point ofview)

Reply
 
Old 09-02-2007   #1 (permalink)
Thorsten Butz


 
 

Adding a manifest to a legacy app (from an administrators point ofview)

I'd like to know if there is a general way to add a valid manifest to a
legacy app.

Consider I'm an admin and I simply have a "application.exe"-file and I
want to add a manifest which tells the OS wether or not to elevate the
user's rights, e.g.:

<requestedPrivileges>
<requestedExecutionLevel
level="highestAvailable"
uiAccess="false"
/>
</requestedPrivileges>

Is that possible or do I need the source-code?

Regards,
Thorsten

My System SpecsSystem Spec
Old 09-02-2007   #2 (permalink)
Ken Zhao [MSFT]


 
 

RE: Adding a manifest to a legacy app (from an administrators point of view)

Hello Thorsten,

Thank you for using newsgroup!

Based on your requirement, I suggest you refer to the following resources:

If you are a Microsoft Empowered, Certified, or Gold Partner, you may use
your advisory benefits on technical issues for Vista Logo Certification.
Global Partner Support has assembled a team to specifically provide Vista
Logo Certification advisory service. We will advise you at a technical
level for each Test Case and help you get through the Vista Logo
Cerification process.

Provide your Microsoft Partner Id when you contact Global Partner Support,
and a Microsoft support case will be created.

To contact ISV Global Partner Support Team:
Email: ISVhelp@xxxxxx
ISV Advisory Services Phone: 1-800-426-9400 Option 1, Ext 84153


Registered only partners may receive 10 advisory hours of email support
accessed from the "Innovate on Vista" website link below. Learn more about
the Vista Logo Certification promotion and sign up as a Microsoft
Registered Partner at: www.InnovateOnVista.com

There are many benefits of getting your Windows Application Vista Logo
Certified. One benefit is you will qualify to become a Certified Partner.
ISV Global Partner Support also provides architectural guidance, custom
workshops, migration best practices, assistance with proof of concepts, and
code samples.

Microsoft Partner Program Website:
https://partner.microsoft.com/US/partner

933305: Applications that have earned the "Certified for Windows Vista"
logo or the "Works with Windows Vista" logo
http://support.microsoft.com/kb/933305/en-us

Application Compatibility and Partners
http://technet.microsoft.com/en-us/w.../aa905104.aspx

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| Date: Sun, 02 Sep 2007 17:06:19 +0200
| From: Thorsten Butz <thbutz@xxxxxx>
| User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
| MIME-Version: 1.0
| Subject: Adding a manifest to a legacy app (from an administrators point
of
| view)
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 7bit
| Message-ID: <OiKPGLX7HHA.3940@xxxxxx>
| Newsgroups:
microsoft.public.windows.vista.administration_accounts_passwords
| NNTP-Posting-Host: dslb-084-062-142-141.pools.arcor-ip.net 84.62.142.141
| Lines: 1
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.administration_accounts_passwords:5254
| X-Tomcat-NG:
microsoft.public.windows.vista.administration_accounts_passwords
|
| I'd like to know if there is a general way to add a valid manifest to a
| legacy app.
|
| Consider I'm an admin and I simply have a "application.exe"-file and I
| want to add a manifest which tells the OS wether or not to elevate the
| user's rights, e.g.:
|
| <requestedPrivileges>
| <requestedExecutionLevel
| level="highestAvailable"
| uiAccess="false"
| />
| </requestedPrivileges>
|
| Is that possible or do I need the source-code?
|
| Regards,
| Thorsten
|

My System SpecsSystem Spec
Old 09-03-2007   #3 (permalink)
Thorsten Butz


 
 

Re: Adding a manifest to a legacy app (from an administrators pointof view)

Thanks for the reply, but:
my question relates to binary applications for which I do NOT own the
source. Is it possible to create a manifest for any existing application?

Regards,
Thorsten
My System SpecsSystem Spec
Old 09-06-2007   #4 (permalink)
Ken Zhao [MSFT]


 
 

Re: Adding a manifest to a legacy app (from an administrators point of view)

Hello Thorsten,

An Application Manifest will identify an application to Windows Vista and
allow administrators to define the application's desired security
credentials-an important step in the deployment process that helps
facilitate a better user experience. The manifest informs Windows Vista
when an application is User Account Control-compliant and when to prompt
users for administrator authorization to elevate privileges. To ensure
integrity and functionality, these manifests can and should be signed.
http://technet.microsoft.com/en-us/w.../aa906021.aspx

In Windows Vista, the application manifest, an XML file that describes and
identifies the shared and private side-by-side assemblies that an
application should bind to at run time, now includes entries for UAC
application compatibility purposes. Administrative applications that
include an entry in the application manifest will prompt the user for
permission to access the user's access token. Most pre-Windows Vista
administrative applications, however, can run smoothly without modification
even though they lack an entry in the application manifest by using
application compatibility fixes. Application compatibility fixes are
database entries that enable applications that are not UAC compliant to
work properly with Windows Vista.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| Date: Mon, 03 Sep 2007 14:38:36 +0200
| From: Thorsten Butz <thbutz@xxxxxx>
| User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
| MIME-Version: 1.0
| Subject: Re: Adding a manifest to a legacy app (from an administrators
point
| of view)
| References: <OiKPGLX7HHA.3940@xxxxxx>
<saDoeud7HHA.360@xxxxxx>
| In-Reply-To: <saDoeud7HHA.360@xxxxxx>
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 7bit
| Message-ID: <eU4kNdi7HHA.1208@xxxxxx>
| Newsgroups:
microsoft.public.windows.vista.administration_accounts_passwords
| NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net 84.62.174.127
| Lines: 1
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.administration_accounts_passwords:5261
| X-Tomcat-NG:
microsoft.public.windows.vista.administration_accounts_passwords
|
| Thanks for the reply, but:
| my question relates to binary applications for which I do NOT own the
| source. Is it possible to create a manifest for any existing application?
|
| Regards,
| Thorsten
|

My System SpecsSystem Spec
Old 09-11-2007   #5 (permalink)
Ken Zhao [MSFT]


 
 

Re: Adding a manifest to a legacy app (from an administrators point of view)

Hi Thorsten,

If you have any updates or need any further assistance on this issue,
please feel free to let me know.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| X-Tomcat-ID: 59857209
| References: <OiKPGLX7HHA.3940@xxxxxx>
<saDoeud7HHA.360@xxxxxx>
<eU4kNdi7HHA.1208@xxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: v-kzhao@xxxxxx ("Ken Zhao [MSFT]")
| Organization: Microsoft
| Date: Thu, 06 Sep 2007 04:50:02 GMT
| Subject: Re: Adding a manifest to a legacy app (from an administrators
point of view)
| X-Tomcat-NG:
microsoft.public.windows.vista.administration_accounts_passwords
| Message-ID: <PrhisFE8HHA.6140@xxxxxx>
| Newsgroups:
microsoft.public.windows.vista.administration_accounts_passwords
| Lines: 78
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.vista.administration_accounts_passwords:5277
| NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
|
| Hello Thorsten,
|
| An Application Manifest will identify an application to Windows Vista and
| allow administrators to define the application's desired security
| credentials-an important step in the deployment process that helps
| facilitate a better user experience. The manifest informs Windows Vista
| when an application is User Account Control-compliant and when to prompt
| users for administrator authorization to elevate privileges. To ensure
| integrity and functionality, these manifests can and should be signed.
| http://technet.microsoft.com/en-us/w.../aa906021.aspx
|
| In Windows Vista, the application manifest, an XML file that describes
and
| identifies the shared and private side-by-side assemblies that an
| application should bind to at run time, now includes entries for UAC
| application compatibility purposes. Administrative applications that
| include an entry in the application manifest will prompt the user for
| permission to access the user's access token. Most pre-Windows Vista
| administrative applications, however, can run smoothly without
modification
| even though they lack an entry in the application manifest by using
| application compatibility fixes. Application compatibility fixes are
| database entries that enable applications that are not UAC compliant to
| work properly with Windows Vista.
|
| Thanks & Regards,
|
| Ken Zhao
|
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
| Get Secure! - www.microsoft.com/security
<http://www.microsoft.com/security>
| ====================================================
| When responding to posts, please "Reply to Group" via your newsreader so
| that others may learn and benefit from your issue.
| ====================================================
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
|
|
|
|
| --------------------
| | Date: Mon, 03 Sep 2007 14:38:36 +0200
| | From: Thorsten Butz <thbutz@xxxxxx>
| | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
| | MIME-Version: 1.0
| | Subject: Re: Adding a manifest to a legacy app (from an administrators
| point
| | of view)
| | References: <OiKPGLX7HHA.3940@xxxxxx>
| <saDoeud7HHA.360@xxxxxx>
| | In-Reply-To: <saDoeud7HHA.360@xxxxxx>
| | Content-Type: text/plain; charset=ISO-8859-1
| | Content-Transfer-Encoding: 7bit
| | Message-ID: <eU4kNdi7HHA.1208@xxxxxx>
| | Newsgroups:
| microsoft.public.windows.vista.administration_accounts_passwords
| | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net 84.62.174.127
| | Lines: 1
| | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| | Xref: TK2MSFTNGHUB02.phx.gbl
| microsoft.public.windows.vista.administration_accounts_passwords:5261
| | X-Tomcat-NG:
| microsoft.public.windows.vista.administration_accounts_passwords
| |
| | Thanks for the reply, but:
| | my question relates to binary applications for which I do NOT own the
| | source. Is it possible to create a manifest for any existing
application?
| |
| | Regards,
| | Thorsten
| |
|
|

My System SpecsSystem Spec
Old 10-17-2007   #6 (permalink)
koschins


 
 

Re: Adding a manifest to a legacy app (from an administrators poin

Hello,

I am having the same problem but this answer seems to be only marketing text
to me.

What are the technical details/steps that need to be done e.g. to mark an
existing .NET executable as "requireAdministrativePermissions" in VISTA. So
far I have come across creating manifest files and using mt.exe to sign the
..net executable. But there seem to be many pitfalls to this (mt.exe Vista SDK
version required due to MS Bug http://support.microsoft.com/kb/925378/en-us).
A complete overview would be helpful (e.g. Is it sufficient to just create
the manifest file or is mt.exe required in VISTA ?)

Greetings,
koschins

""Ken Zhao [MSFT]"" wrote:
Quote:

> Hello Thorsten,
>
> An Application Manifest will identify an application to Windows Vista and
> allow administrators to define the application's desired security
> credentials-an important step in the deployment process that helps
> facilitate a better user experience. The manifest informs Windows Vista
> when an application is User Account Control-compliant and when to prompt
> users for administrator authorization to elevate privileges. To ensure
> integrity and functionality, these manifests can and should be signed.
> http://technet.microsoft.com/en-us/w.../aa906021.aspx
>
> In Windows Vista, the application manifest, an XML file that describes and
> identifies the shared and private side-by-side assemblies that an
> application should bind to at run time, now includes entries for UAC
> application compatibility purposes. Administrative applications that
> include an entry in the application manifest will prompt the user for
> permission to access the user's access token. Most pre-Windows Vista
> administrative applications, however, can run smoothly without modification
> even though they lack an entry in the application manifest by using
> application compatibility fixes. Application compatibility fixes are
> database entries that enable applications that are not UAC compliant to
> work properly with Windows Vista.
>
> Thanks & Regards,
>
> Ken Zhao
>
> Microsoft Online Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
>
> --------------------
> | Date: Mon, 03 Sep 2007 14:38:36 +0200
> | From: Thorsten Butz <thbutz@xxxxxx>
> | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
> | MIME-Version: 1.0
> | Subject: Re: Adding a manifest to a legacy app (from an administrators
> point
> | of view)
> | References: <OiKPGLX7HHA.3940@xxxxxx>
> <saDoeud7HHA.360@xxxxxx>
> | In-Reply-To: <saDoeud7HHA.360@xxxxxx>
> | Content-Type: text/plain; charset=ISO-8859-1
> | Content-Transfer-Encoding: 7bit
> | Message-ID: <eU4kNdi7HHA.1208@xxxxxx>
> | Newsgroups:
> microsoft.public.windows.vista.administration_accounts_passwords
> | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net 84.62.174.127
> | Lines: 1
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.vista.administration_accounts_passwords:5261
> | X-Tomcat-NG:
> microsoft.public.windows.vista.administration_accounts_passwords
> |
> | Thanks for the reply, but:
> | my question relates to binary applications for which I do NOT own the
> | source. Is it possible to create a manifest for any existing application?
> |
> | Regards,
> | Thorsten
> |
>
>
My System SpecsSystem Spec
Old 10-17-2007   #7 (permalink)
Ronnie Vernon MVP


 
 

Re: Adding a manifest to a legacy app (from an administrators poin

Koschins

You might get more focused information on the free MSDN developer forums.
You can dialog there with other developers and Microsoft employees who may
have the answers you are looking for.

MSDN Forums: Vista Software Development.
http://forums.microsoft.com/MSDN/def...ID=24&SiteID=1


--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"koschins" <koschins@xxxxxx> wrote in message
news:61E3251D-362C-49BB-9354-CA50F50DFB16@xxxxxx
Quote:

> Hello,
>
> I am having the same problem but this answer seems to be only marketing
> text
> to me.
>
> What are the technical details/steps that need to be done e.g. to mark an
> existing .NET executable as "requireAdministrativePermissions" in VISTA.
> So
> far I have come across creating manifest files and using mt.exe to sign
> the
> .net executable. But there seem to be many pitfalls to this (mt.exe Vista
> SDK
> version required due to MS Bug
> http://support.microsoft.com/kb/925378/en-us).
> A complete overview would be helpful (e.g. Is it sufficient to just create
> the manifest file or is mt.exe required in VISTA ?)
>
> Greetings,
> koschins
>
> ""Ken Zhao [MSFT]"" wrote:
>
Quote:

>> Hello Thorsten,
>>
>> An Application Manifest will identify an application to Windows Vista and
>> allow administrators to define the application's desired security
>> credentials-an important step in the deployment process that helps
>> facilitate a better user experience. The manifest informs Windows Vista
>> when an application is User Account Control-compliant and when to prompt
>> users for administrator authorization to elevate privileges. To ensure
>> integrity and functionality, these manifests can and should be signed.
>> http://technet.microsoft.com/en-us/w.../aa906021.aspx
>>
>> In Windows Vista, the application manifest, an XML file that describes
>> and
>> identifies the shared and private side-by-side assemblies that an
>> application should bind to at run time, now includes entries for UAC
>> application compatibility purposes. Administrative applications that
>> include an entry in the application manifest will prompt the user for
>> permission to access the user's access token. Most pre-Windows Vista
>> administrative applications, however, can run smoothly without
>> modification
>> even though they lack an entry in the application manifest by using
>> application compatibility fixes. Application compatibility fixes are
>> database entries that enable applications that are not UAC compliant to
>> work properly with Windows Vista.
>>
>> Thanks & Regards,
>>
>> Ken Zhao
>>
>> Microsoft Online Support
>> Microsoft Global Technical Support Center
>>
>> Get Secure! - www.microsoft.com/security
>> <http://www.microsoft.com/security>
>> ====================================================
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ====================================================
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>>
>>
>>
>> --------------------
>> | Date: Mon, 03 Sep 2007 14:38:36 +0200
>> | From: Thorsten Butz <thbutz@xxxxxx>
>> | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
>> | MIME-Version: 1.0
>> | Subject: Re: Adding a manifest to a legacy app (from an administrators
>> point
>> | of view)
>> | References: <OiKPGLX7HHA.3940@xxxxxx>
>> <saDoeud7HHA.360@xxxxxx>
>> | In-Reply-To: <saDoeud7HHA.360@xxxxxx>
>> | Content-Type: text/plain; charset=ISO-8859-1
>> | Content-Transfer-Encoding: 7bit
>> | Message-ID: <eU4kNdi7HHA.1208@xxxxxx>
>> | Newsgroups:
>> microsoft.public.windows.vista.administration_accounts_passwords
>> | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net
>> 84.62.174.127
>> | Lines: 1
>> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>> | Xref: TK2MSFTNGHUB02.phx.gbl
>> microsoft.public.windows.vista.administration_accounts_passwords:5261
>> | X-Tomcat-NG:
>> microsoft.public.windows.vista.administration_accounts_passwords
>> |
>> | Thanks for the reply, but:
>> | my question relates to binary applications for which I do NOT own the
>> | source. Is it possible to create a manifest for any existing
>> application?
>> |
>> | Regards,
>> | Thorsten
>> |
>>
>>
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
MANIFEST Vista General
.EXE.manifest Vista installation & setup
Manifest not working Vista security
UAC Manifest for VB6 Apps Vista security
Restore point filling drive to point of no free space Vista performance & maintenance


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46