Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - UAC - changing a program so it doesnt elevate

Reply
 
Old 12-04-2007   #1 (permalink)
quietshade


 
 

UAC - changing a program so it doesnt elevate

I originally installed a game to c/program files, using the admin account,
and it requires all users to allow it to run with the admin password. This
totally defeats the system security - all users must know admin password. I
moved the files to c\users\public\pubapps (which i created), made pubapps
shared to all, made pubapps owner 'everyone', gave 'everyone' permission to
do everything, changed all data in registry that still referenced the
original program files location to the new location. It still requires the
admin password. So I changed the file location to a single user,
c\user\oneuser\gamefiles, changed all the files owner to oneuser, made sure
all the registry stuff was redirected again, and made sure all permissions
were valid etc. etc. I absolutly cannot find out why it keeps wanting to run
elevated. In the games online forums is where i found the info tomove the
files out of program files locale, they say it should work - it is not. What
else can I do, except turn off UAC, which i dont want to do. The game is City
of Heroes, by ncsoft. When the game starts, an updater starts first. I've
looked for a file it may change on startup in the hidden appdata files for
the admin account, thinking that it may require the admin password because it
is trying to write to a hidden file there, but cannot find such.....Any
suggestion? Turning off UAC or uninstalling/reinstalling is lame, this
problem should be fixable.

My System SpecsSystem Spec
Old 12-06-2007   #2 (permalink)
BurrWalnut


 
 

RE: UAC - changing a program so it doesnt elevate

You don’t have to turn UAC off, you can stop the prompt without UAC losing
its security strengths, in Vista Home Basic and Vista Home Premium go to the
Windows Orb (Start), type regedit, press Enter and navigate to registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
and change the value of ConsentPromptBehaviorAdmin to 0 (zero) from 2.

Or read this
http://msmvps.com/blogs/bradley/arch...-now-what.aspx

For other flavours of Vista, go to Control Panel > Administration Tools >
Local Security Policy > Local Policies > Security Options, scroll down to
‘User Account Control: Behavior of the elevation prompt for administrators in
Admin Approval Mode‘, double-click it and set the drop-down menu to ‘Elevate
without prompting’.

"quietshade" wrote:
Quote:

> I originally installed a game to c/program files, using the admin account,
> and it requires all users to allow it to run with the admin password. This
> totally defeats the system security - all users must know admin password. I
> moved the files to c\users\public\pubapps (which i created), made pubapps
> shared to all, made pubapps owner 'everyone', gave 'everyone' permission to
> do everything, changed all data in registry that still referenced the
> original program files location to the new location. It still requires the
> admin password. So I changed the file location to a single user,
> c\user\oneuser\gamefiles, changed all the files owner to oneuser, made sure
> all the registry stuff was redirected again, and made sure all permissions
> were valid etc. etc. I absolutly cannot find out why it keeps wanting to run
> elevated. In the games online forums is where i found the info tomove the
> files out of program files locale, they say it should work - it is not. What
> else can I do, except turn off UAC, which i dont want to do. The game is City
> of Heroes, by ncsoft. When the game starts, an updater starts first. I've
> looked for a file it may change on startup in the hidden appdata files for
> the admin account, thinking that it may require the admin password because it
> is trying to write to a hidden file there, but cannot find such.....Any
> suggestion? Turning off UAC or uninstalling/reinstalling is lame, this
> problem should be fixable.
My System SpecsSystem Spec
Old 12-06-2007   #3 (permalink)
quietshade


 
 

RE: UAC - changing a program so it doesnt elevate

True enough, but the game can start IE, and silently elevating it to admin is
not much better than disabling UAC altogether. I'd like to find out why it is
elevating, is there a way to moniter it's behavior when starting to see why
the system wants to elevate it to admin? Running a game in admin is not real
secure, especially when it can launch webpages and open the whole system up
to threats.

"BurrWalnut" wrote:
Quote:

> You don’t have to turn UAC off, you can stop the prompt without UAC losing
> its security strengths, in Vista Home Basic and Vista Home Premium go to the
> Windows Orb (Start), type regedit, press Enter and navigate to registry key
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
> and change the value of ConsentPromptBehaviorAdmin to 0 (zero) from 2.
>
> Or read this
> http://msmvps.com/blogs/bradley/arch...-now-what.aspx
>
> For other flavours of Vista, go to Control Panel > Administration Tools >
> Local Security Policy > Local Policies > Security Options, scroll down to
> ‘User Account Control: Behavior of the elevation prompt for administrators in
> Admin Approval Mode‘, double-click it and set the drop-down menu to ‘Elevate
> without prompting’.
>
> "quietshade" wrote:
>
Quote:

> > I originally installed a game to c/program files, using the admin account,
> > and it requires all users to allow it to run with the admin password. This
> > totally defeats the system security - all users must know admin password. I
> > moved the files to c\users\public\pubapps (which i created), made pubapps
> > shared to all, made pubapps owner 'everyone', gave 'everyone' permission to
> > do everything, changed all data in registry that still referenced the
> > original program files location to the new location. It still requires the
> > admin password. So I changed the file location to a single user,
> > c\user\oneuser\gamefiles, changed all the files owner to oneuser, made sure
> > all the registry stuff was redirected again, and made sure all permissions
> > were valid etc. etc. I absolutly cannot find out why it keeps wanting to run
> > elevated. In the games online forums is where i found the info tomove the
> > files out of program files locale, they say it should work - it is not. What
> > else can I do, except turn off UAC, which i dont want to do. The game is City
> > of Heroes, by ncsoft. When the game starts, an updater starts first. I've
> > looked for a file it may change on startup in the hidden appdata files for
> > the admin account, thinking that it may require the admin password because it
> > is trying to write to a hidden file there, but cannot find such.....Any
> > suggestion? Turning off UAC or uninstalling/reinstalling is lame, this
> > problem should be fixable.
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Click on program, sticks on loading, doesnt open Vista General
Changing Shortcut Icon for DOS Program Vista General
Program for changing the Look of vista? Software
changing default program Vista General
Changing default email program Vista mail


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46