how to disable vista UAC

[inkwaterman]

Hi !

It's possible to disable the Vista UAC programatly?

I have to port my application to Vista, and I need to disable the UAC, also temporarily..

Have you Any Advice?


Thanks

[Joacim Andersson]

If you need to turn off UAC your application is not ported for Vista
You can not turn off UAC without a restart of the computer, you need to change or create a DWORD in the registry and name it EnableLUA at this point:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
and set it to 0. Change it to 1 to turn UAC back on.

[inkwaterman]

You are right !

But I have to change network card setup (IP and Subnetmask) and share some folder, and in my application I used the WMI, and with WMI if you don't turn off UAC you can't do anythinks (I think ).

Also change register value if I have UAC ON it's impossible !

Have you some advice ?

Thanks

[Joacim Andersson]

You can change the registry entries and I also think you can run WMI, however the application need Administrator privileges. Instead of turning UAC off you should change the manifest and require the elevated privileges.

[inkwaterman]

I tried to change the privilege with the this manifest file:

<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" 
xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <assemblyIdentity version="0.9.0.0" name="DSSNetworkConfigurator"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <!-- UAC Manifest Options
            If you want to change the Windows User Account Control level replace the 
            requestedExecutionLevel node with one of the following.

        <requestedExecutionLevel  level="asInvoker" uiAccess="false" />
        <requestedExecutionLevel  level="requireAdministrator" uiAccess="false" />
        <requestedExecutionLevel  level="highestAvailable" uiAccess="false" />

            If you want to utilize File and Registry Virtualization for backward 
            compatibility then delete the requestedExecutionLevel node.
        -->
        <requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
      </requestedPrivileges>
    </security>
  </trustInfo>
</asmv1:assembly>

But it doesn't work. Perhaps I make a mistake somewhere.

My manifest file is called app.manifest and I copied it in to the exe directory.

Where I 'm wrong ?


Thanks

[Joacim Andersson]

Did you copy it manually or do you let Visual Studio do it for you? If you let VS do it it should be renamed from app.manifest to <YourAppName>.exe.manifest, so make sure that is actually the name of the manifest file.

[inkwaterman]

I copied the manifest file manually.

It's possible to set VS 2005 to make it automactly?

I searched on the app properties but i didn't find anythink !


Thanks for all your reply you give me a strong help in my job !

[Joacim Andersson]

I don't remember with VS 2005. Does it work now after you renamed the manifest?

[kleinma]

Is this disabling a temporary measure for yourself to get your app working on Vista, or is this something you plan to do on your customers computers?

I would highly advise against turning off UAC at all on a customers computer. If that were to happen to me, I would consider the app a virus, regardless of how legit it may be.

If this is internal, like for a company you work for, then its a different story and it shouldnt be a big deal so long as your company allows it.

However if this is just for you on your own computer, why don't you just log into Vista as "administrator". When you do this, Vista UAC doesn't get in the way, and the administrator account on Vista runs just like anyone in the administrators group would run on XP.

[RobDog888]

Are you talking about the real Administrator account Matt? It should still prompt you but not require login credientials.

If your computer is running an antivisue, attempting to turn off the UAC may raise a flag for the AV software. The best solution is to code it properly instead of trying to bypass security.

[kleinma]

yes, the "real" administrator account. You should not get ANY UAC prompts in Vista when logged in as that account. I don't on my Vista boxes.

Even if you go to the Run command in the start menu (if you enabled it) it will have a special note when you are running under the administrator account saying "this process will be run with administrative rights" or something of that nature.

Are you saying you DO see UAC prompts in Vista when logged in as administrator?

[RobDog888]

Hmm, well if you just tried then I will go with that as its been a while since i logged in as the actual administrator and of course Im at work now where we are still on that sad OS called XP lol.

[kleinma]

I didn't just try (@ work on XP too ), so there is a chance I am totally crazy and wrong, but I have used Vista a good amount on my laptop (but ive been on Win7 beta for 2 months now) and I am pretty sure I am correct.

[RobDog888]

And Ive just got to work and am on my first cup of coffee but I have used vista for 2.5 years now.

Is this elevation necessary for hte entire application? Its best design to write a separate component that does the task and raise just that process instead of the entire application.

[inkwaterman]

Thanks to ALL !

I have resolved my problem with the inclusion of manifest file.

But another problem raise up...

How I can check ,and eventually turn of the request of username and password to access to shared folder ?


thanks

[RobDog888]

The shared folder has permissions set?

[inkwaterman]

Yes the folder are shared, and EVERYONE can access in, but only if they insert username and password.

In the Vista control panel there is an option that if disable permits to access to shared folder WITHOUT insert username and password.

How I can check , and eventualy change, the status of this flag ?


thanks