Need to allow for downloaded executables to run as standard user w/o need for UAC admin credentials.
I have an executive who needs to update insurance rates on his PC form time to time for about seven or so different companies. Six out of the seven have provided static .exe files that are installed on the PC and do not change. In these cases, the rate updates are imported through some other kind of file format and I used the Application Compatibility Toolkit to get the executables to bypass UAC and run under a standard user (see the below link. . .I enabled "RunAsAdmin" and "RunAsHighest" as well as "RunAsInvoker). However, for the last of the seven, a new executable is provided every time so there is nothing permanent for me to affix to a "compatibility fixes database". This is really a shame because it worked like a charm for the other six. As it stands, I am back to sqare one with the remaining .exe (which is actually a series of executables where one overwrites and replaces the last) and am open for suggestions as to how I can get Windows 7 to let download them, save them to a specif folder, and run them without any muss and fuss from UAC. I know about Windows XP mode, but to me that sounds like I would have to train the guy on how to start a virtual PC and have him navigate within there to do all this. . .I'm not sure how that will fly. Any other ideas would be appreciated. http://www.techrepublic.com/blog/window-on-windows/selectively-disable-uac-for-your-trusted-vista-applications/635 -Brian McKnight
September 20th, 2011 3:06pm

Hi bmcknight, Based on my known, there's no official document confirm this method could set a certain application pass the UAC completely. Therefore, it may not work 100% for every situation, somethings like security settings could also affect that. I suggest you also contact that blog's writer to check if there's any other method. However, as a workaround, you can take the following suggestions to create a shortcut with highest priviledges to run an application without prompting. 1. Click Start, right-click on Computer and choose Manage. 2. Click Task Scheduler on the left panel. 3. Click Create Task on the right panel. 4. Type a name for the task, check "Run with highest privileges" 5. Click Triggers tab, click New. Select At log on under begin task. 6. Select Specific User Or Group. this ensures the task only runs at log on for you and not all users. Running for all users would be a security risk due to the program running under your User Account with Administrative Accss. Then click OK. 7. Click Actions tab, click New... 8. Browse to the program in the Program/script box, click OK. 9. Click the Conditions tab. Uncheck Start the task only if the computer is on AC power. 10. Click the Settings tab. Uncheck Stop the task if it runs longer then. Then click OK. 11. On the desktop, right-click choose New and click Shortcut. 12. In the box type: schtasks.exe /run /tn TaskName where TaskName is the name of task you put in on the basics tab and click Next. 13. Type a name for the shortcut and click Finish. Now, you can double-click the shortcut to run the program without prompt. Hope this workaround could help you. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tnmff@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 21st, 2011 5:00am

Hi Brian, do these files attempt to write to an protected location? (I.e. Program Files folder or HKLM registry key) After downloading them, where are they located? If on a network server, is this server registered in the Local Intranet Sites zone in IE on the clients? Did you "unblock" the exe file (right click/Properties/Unblock)? It should also be possible to contact the company, which delivers the file and REQUIRE them to make them compatible for limited users by adding an appropriate manifest (running as invoker) and avoid to request more access permissions than needed. Best greetings from Germany Olaf
September 21st, 2011 5:30am

How's it going? Please feel free to give us any update. Regards, Miya TehcNet Subscriber Support in forum. If you have any feedback on our support, please contact tnmff@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 26th, 2011 5:29am

I'm sorry. . .was pulled into other things. Miya, I did try something that was very similar to what you suggested but it did not work. . .the shortcut to the task did not do anything when I clicked it (I saw a window that looked like a command prompt appear for less than a second and then go away). Olaf, I wish that I could talk to that company but for some reason that has to do with insurance regulations I am unable to. As for "unblocking" the executable file, the problem is that it is not one consistent executable file (they send a new one to replace the old one every time they change their rates). I was given clearance to try the Virtual XP mode on the machine. This may work but the drawback I feel is that it is going to be heavy on end-user input (I've been trying to make it seamless for the guy). -Brian McKnight
September 28th, 2011 10:37am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics