Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - UAC and installers

Reply
 
Old 02-15-2007   #1 (permalink)
Corey Hildebrandt


 
 

UAC and installers

When installing programs under a limited user account, start menu shortcuts
are not created for the current user. These installers do not have the
option of creating shortcuts for 'all users.' I suspect that these type of
installers would need to be rewritten. Is this correct or is there some
setting that will allow installers to behave like before.

Additionally, programs that have profiles or user settings (e.g. Firefox),
you you choose 'run the application' at the end of the install, the
application actually runs as administrator. So if you run the application
from the installer, customize the application, close the application and
then re-run it, the customization is 'lost' (actuall it is attached to the
administrator account). Again, I suspect that the installer would need to be
rewritten to lower credentials at the end of the installer or is there a
setting somwhere in group policy?

Thanks
CoreyH


My System SpecsSystem Spec
Old 02-15-2007   #2 (permalink)
Jesper


 
 

RE: UAC and installers

> are not created for the current user. These installers do not have the
> option of creating shortcuts for 'all users.' I suspect that these type of
> installers would need to be rewritten. Is this correct


Yes. These installers were not designed properly to take into account how
people use Vista.

> Additionally, programs that have profiles or user settings (e.g. Firefox),
> you you choose 'run the application' at the end of the install, the
> application actually runs as administrator.


Right, if you are running as a standard user then that is how it works. You
should not use that feature. It should go away.

>Again, I suspect that the installer would need to be
> rewritten to lower credentials at the end of the installer or is there a
> setting somwhere in group policy?


There is no setting in Windows. The installer was just written to not take
into account the best, most secure, way to run Windows Vista.
My System SpecsSystem Spec
Old 02-15-2007   #3 (permalink)
Kerry Brown


 
 

Re: UAC and installers

It's a real pain but the solution is to temporarily make the user an
administrator while installing the program. If you use Run as administrator
or get a UAC prompt and specify an account while running as a standard user
the process will run as the account you specified. There is no way around
this without compromising security. The problem is caused by poor
programming on the part of whoever created the installer and/or the program
but it is a problem nonetheless.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Corey Hildebrandt" <childeb1@hotmail.com> wrote in message
news:CE763658-881A-4895-8142-88808828A089@microsoft.com...
> When installing programs under a limited user account, start menu
> shortcuts are not created for the current user. These installers do not
> have the option of creating shortcuts for 'all users.' I suspect that
> these type of installers would need to be rewritten. Is this correct or is
> there some setting that will allow installers to behave like before.
>
> Additionally, programs that have profiles or user settings (e.g. Firefox),
> you you choose 'run the application' at the end of the install, the
> application actually runs as administrator. So if you run the application
> from the installer, customize the application, close the application and
> then re-run it, the customization is 'lost' (actuall it is attached to the
> administrator account). Again, I suspect that the installer would need to
> be rewritten to lower credentials at the end of the installer or is there
> a setting somwhere in group policy?
>
> Thanks
> CoreyH


My System SpecsSystem Spec
Old 02-15-2007   #4 (permalink)
Corey Hildebrandt


 
 

Re: UAC and installers

Thanks for the reply. I wanted to make sure that I wasn't missing a setting
somewhere.

CoreyH


"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:%23EtkymUUHHA.868@TK2MSFTNGP05.phx.gbl...
> It's a real pain but the solution is to temporarily make the user an
> administrator while installing the program. If you use Run as
> administrator or get a UAC prompt and specify an account while running as
> a standard user the process will run as the account you specified. There
> is no way around this without compromising security. The problem is caused
> by poor programming on the part of whoever created the installer and/or
> the program but it is a problem nonetheless.
>
> --
> Kerry Brown
> Microsoft MVP - Shell/User
> http://www.vistahelp.ca
>
>
> "Corey Hildebrandt" <childeb1@hotmail.com> wrote in message
> news:CE763658-881A-4895-8142-88808828A089@microsoft.com...
>> When installing programs under a limited user account, start menu
>> shortcuts are not created for the current user. These installers do not
>> have the option of creating shortcuts for 'all users.' I suspect that
>> these type of installers would need to be rewritten. Is this correct or
>> is there some setting that will allow installers to behave like before.
>>
>> Additionally, programs that have profiles or user settings (e.g.
>> Firefox), you you choose 'run the application' at the end of the install,
>> the application actually runs as administrator. So if you run the
>> application from the installer, customize the application, close the
>> application and then re-run it, the customization is 'lost' (actuall it
>> is attached to the administrator account). Again, I suspect that the
>> installer would need to be rewritten to lower credentials at the end of
>> the installer or is there a setting somwhere in group policy?
>>
>> Thanks
>> CoreyH

>


My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Installers freeze Vista installation & setup
Windows Installers Vista General
Prevent Windows Web Installers Vista security
dotnet installers do nothing .NET General
Watch out Vista Installers (FYI) Vista installation & setup


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46