Vista is blocking my program on start

Hi All,

I'm sorry if this is not the right group to ask, I just haven't found
anything more similar.
I also haven't found the definitive answer to this quesion by searching the
net.

So, I have the program that needs to run upon user login and it must run
with administrative
privilege. Changes in manifest file made it run with administrative rights,
however it's been
blocked on starup by Windows Defender.

What can I do?

Thank you in advance,
Oleg

You can't have an administrative program run when the user starts their
computer.

Without knowing exactly what your programing is doing, I would say it is
very likely that your program should be implemented as a Windows Service.


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

Well, you can, but all users must be admins then. That would be A Really Bad
Idea(tm).

If you absolutely must have it this way, this will help:
http://go.microsoft.com/fwlink/?LinkId=77080
Search for "Group Policy Scripts can fail due to User Account Control"

You also need to somehow get Defender to stop blocking them:
http://support.microsoft.com/default.aspx/kb/930367

"Jimmy Brush" wrote:

> You can't have an administrative program run when the user starts their
> computer.
>
> Without knowing exactly what your programing is doing, I would say it is
> very likely that your program should be implemented as a Windows Service.
>
>
> --
> - JB
> Microsoft MVP - Windows Shell/User
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/
>

Thank you for your responses.

My program is a GUI application where most of the time it resides as an icon
on the system tray.
So, running it as a Windows Service is not an option.

I wonder how all those GUI applications at the system tray interact with the
system components, which requires administrative privilege?
Apparently, I need to do a similar job rather than what you've descibed
below.

Oleg

"Jesper" <Jesper@discussions.microsoft.com> wrote in message
news:41FD09F7-8C8F-4C98-9BD6-BCBC0B11DF97@microsoft.com...
> Well, you can, but all users must be admins then. That would be A Really
> Bad
> Idea(tm).
>
> If you absolutely must have it this way, this will help:
> http://go.microsoft.com/fwlink/?LinkId=77080
> Search for "Group Policy Scripts can fail due to User Account Control"
>
> You also need to somehow get Defender to stop blocking them:
> http://support.microsoft.com/default.aspx/kb/930367
>
> "Jimmy Brush" wrote:
>
>> You can't have an administrative program run when the user starts their
>> computer.
>>
>> Without knowing exactly what your programing is doing, I would say it is
>> very likely that your program should be implemented as a Windows Service.
>>
>>
>> --
>> - JB
>> Microsoft MVP - Windows Shell/User
>>
>> Windows Vista Support Faq
>> http://www.jimmah.com/vista/
>>

The design guidance for handling this situation is to factor the application
into two components: a service that runs elevated, and a user-mode component
that runs as the user. As part of that factoring you should write an LPC
mechanism so the two can communicate.

"Oleg" wrote:

> Thank you for your responses.
>
> My program is a GUI application where most of the time it resides as an icon
> on the system tray.
> So, running it as a Windows Service is not an option.
>
> I wonder how all those GUI applications at the system tray interact with the
> system components, which requires administrative privilege?
> Apparently, I need to do a similar job rather than what you've descibed
> below.