Re: Vista: asInvorker manifest, don't want elevation



You can only elevate - not downgrade...

You have to have an invoker (like autorun.exe) that runs asInvoker.

From there you start the installer (requiresAdmin)
When the installer is finished you run the app you want to run (asInvoker)

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

Hello,

I do not want my app to get elevation in Vista when run from another
app (setup) that was granted elevation.
So asInvoker in the manifest is not what I want, requireAdministrator
or highestAvaialble not at all.
How can I make sure the app is run with medium level (provided UAC is
on)?
Thanks,
Jens


.