FAQ: What is the UAC? - Part2

[MagicAndre1981]

look at the Active Home Pro documenation

[ggbal]

I followed the step. But still the standard user gets the UAC prompt saying the publisher is unverified. Here is the task xml.

Please help.

<?xml version="1.0" encoding="UTF-16" ?>

- <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">

- <RegistrationInfo>

<Date>2010-10-07T22:37:54.9815795</Date>

<Author>MyDomain\User</Author>

</RegistrationInfo>

<Triggers />

- <Principals>

- <Principal id="Author">

<UserId>MyDomain\User</UserId>

<LogonType>InteractiveToken</LogonType>

<RunLevel>HighestAvailable</RunLevel>

</Principal>

</Principals>

- <Settings>

<MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>

<DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>

<StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>

<AllowHardTerminate>true</AllowHardTerminate>

<StartWhenAvailable>false</StartWhenAvailable>

<RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>

- <IdleSettings>

<StopOnIdleEnd>true</StopOnIdleEnd>

<RestartOnIdle>false</RestartOnIdle>

</IdleSettings>

<AllowStartOnDemand>true</AllowStartOnDemand>

<Enabled>true</Enabled>

<Hidden>false</Hidden>

<RunOnlyIfIdle>false</RunOnlyIfIdle>

<WakeToRun>false</WakeToRun>

<ExecutionTimeLimit>P3D</ExecutionTimeLimit>

<Priority>7</Priority>

</Settings>

- <Actions Context="Author">

- <Exec>

<Command>"C:\Tools (x86)\BJ\TdxW\TdxW.exe"</Command>

</Exec>

</Actions>

</Task>

Thanks,

GG

[MagicAndre1981]

this is correct. Standard suers have no 2 tokens, so <RunLevel>HighestAvailable</RunLevel> is user rights adnd you get the UAC prompt. This workaround only works for users which are part of the admin group.

[ggbal]

Thanks for the quickly reply. So for standard user, is there any solution for this problem?

[MagicAndre1981]

no

[RD9678]

I have followed your steps. When I log in with the account with Admin Privileges this works. When I log in with the standard user privileges and get to the Actions Tab step, click on OK, and I see "Task schedule cannot create the task. The user account is unknown, the password is incorrect, or the user account does not have permission to create this task". I have switched to the admin account with the Create Task window and still get the same error. I try importing the task from the windows scheduler where I created the initial autoElevate task, and it imports until I get to the step to click OK, and then I get the same error message as above. I seem to be doing something incorrectly.

[MagicAndre1981]

When you run with standard user rights, this doesn't work, because only admin have the 2 tokens. You can select "Run whether the user is logged on or not" and pick the admin account. With this you can run programs, but you don't see the GUI. So this is only helpful for background tasks.

[Chip]

Andre, thanks for this information!! This is very useful!

I used this procedure successfully for one of my own programs. However, I have another 3rd-party program that I would like to add. That program expects an ini file to be in the program's startup directory. Presently, the shortcut says that my startup directory is "C:\WINDOWS\SYSTEM32". Right-clicking on the startup icon and changing the startup directory doesn't seem to do the job. I prefer not to copy the ini file to the System32 directory unless I have to. Any suggestions?

------------------------

Never mind!! Ignore my question and please ignore the duplicate "ignore me" post. I just joined the forum.

I found the location in the MMC Taskscheduler where I can set the startup directory.

Thanks again for this very helpful post!

Chip

Edited June 16, 2011 by Chip

[Chip]

Never mind!! Ignore my question.

I found the location in the MMC Taskscheduler where I can set the startup directory.

Thanks again for this very helpful post.

Chip

-----------

Is there a way to delete a duplicate posting?

Edited June 16, 2011 by Chip

[Zilver]

Thanks a ton, this was very useful to me

[aliceccentric]

Awesome tip. Thanks; it worked beautifully!

[MagicAndre1981]

you're welcome

[anotherusername]

This doesn't work at all on my computer. I followed every step and it doesn't make any difference. You still have to answer the question about allowing programs to run.

I don't know what else to post here. Is there some kind of log or something I can post that would show what's going on?

[MagicAndre1981]

don't run the original program. run it with the schtask command.

[Incriminate]

This has been annoying me for a long time, while it takes a little time to set up. It means no more UAC for me

Thanks André

And for the guy that didn't know how to write the "é", press Alt Gr + E