Re: Major problems with UAC

"Mick" wrote:

Our product works fine on Win2K and XP, but when we try to run it on a
Vista
system, nothing works! From our initial debugging, it appears that UAC is
the
root of all our problems. Nothing works with UAC turned on. We cannot
access
any of our registry keys, can?t create or open named pipes, mutexes,
shared
memory blocks, or any other sharable objects. We can?t even create a
simple
text file! Our code uses null DACLs for most objects, which should allow
access to anyone, but when UAC is on, nothing works

What exactly happens? Are you getting an access denied error?

Where are non user-specific services supposed to store their registry
information, if not in HKEY_LOCAL_MACHINE?

HKLM\Software is the right place.

Do DACLs work differently under Vista? If so, what are the differences and
where are they documented? Why doesn't a null DACL give all users access?

DACLs should work as before. If virtualization is disabled and you're
getting
access denied trying to open an object with a NULL DACL for write access,
it might be because of integrity levels:

http://www.microsoft.com/technet/technetmag/issues/2007/06/UAC/default.aspx

I understand that we can use manifest files to bypass virtualization for
our
own applications, but how can we get around it for our DLLs that link to
other applications?

For registry keys, you can set REG_KEY_DONT_VIRTUALIZE flag:

http://msdn2.microsoft.com/en-us/library/aa965884.aspx

This shouldn't be necessary though, because virtualized copies are created
only when a write operation would have failed otherwise. If ACLs are set
appropriately, virtualization should not occur.

--
This posting is provided "AS IS" with no warranties, and confers no
rights.


.

Relevant Pages

  • Re: Adding a reference to a COM in VS2008
    ... for fun I turned UAC back on and the library was still visible. ... "Virtualization" in Vista. ... Apart from the file-system redirection for the C:\Windows\ and C:\Program ... Microsoft Online Community Support ...
    (microsoft.public.dotnet.general)
  • Re: Permissions Issue
    ... How would I know about detection of legacy problems and virtualization without UAC being enabled? ... without any installation issues, but for the past month I've been having problems with program updates not installing due to access being denied. ...
    (microsoft.public.windows.vista.security)
  • Re: Problem with Vista and VB6, will run under user but not admini
    ... So I would try running it with a manifest. ... If that makes no differences you need to look at the code, perhaps in conjunction with process monitor: ... > We ran a test disabling virtualization from uac and the same thing ... > user worked, admin or UAC off, application no where to be seen except> on ...
    (microsoft.public.vb.general.discussion)
  • Re: Microsoft says Vista sales hits 60 million mark
    ... The problem now is that the UAC model DOES NOT support legacy applications at all. ... We have to now rewrite our installers and application to work around this horrible locking of directories when UAC is on. ... So all they needed to do is pop up a MessageBox that when running an application that needs admin rights, ...
    (borland.public.delphi.non-technical)
  • Re: UAC Questions
    ... Applications that can affect OS files such as Vista's administrative tools or 3rd party applications such as Acronis, need administrative permission. ... One way of trying to get around this is to turn UAC off. ...
    (microsoft.public.windows.vista.general)