|
Hi,
I have a driver (.sys file) signed using verisign. But when I am loading that signed driver it is failing due to some of the local security policies i.e. UAC is enabled. If I disabled UAC then I am able to load driver.
As per microsoft user will not be able to load unsigned drivers. I would like to know what steps needs to be done in order to load signed drivers on Windows Vista with UAC enabled.
SNI
jhghjghj
|
|
|
|
|
Only administrators can load new drivers, signed or otherwise. Whatever program is trying to load the driver must be running elevated. That means using a manifest to mark the program as requiring administrative rights, or another approach to cause the program or code to be elevated, such as the COM Elevation Moniker[^].
If you're using a Windows Installer package and using a custom action to load the driver, you will need to ensure that the custom action is not marked to Impersonate the active user. An Impersonated custom action will execute using the unprivileged token even if the user running the package belongs to the Administrators group. A non-impersonated action will run in the LocalSystem context.
"Multithreading is just one damn thing after, before, or simultaneous with another." - Andrei Alexandrescu
|
|
|
|
|
Hi,
I would like to know What is the significance of Admin Approval Mode in Windows Vista? What is the impact on system and application running under vista if I disable this?
Can we keep disable this for applcaition to run properly. My application is doing some hooking for Keyboard and Mouse and also injecting dll in to some processes.
Thanks
SNI
jhghjghj
|
|
|
|
|
Admin approval mode is a mode where a user who is an admin will be prompted for approval before admin tasks are run.
It works by running the user as a normal user most of the time, and elevating them to admin when required (with a confirmation prompt)
You should not disable it for developing because you need to ensure you application works with it because your users may have it turned on. You should embed a manifest in your application to tell vista how you program should behave. You can use the manifest to tell vista that you program requires elevation, and vista will elevate it and display the required prompt to the user.
Simon
|
|
|
|
|
Thanks. I have a application (TestA) which forks another application (TestB) with admin credentials. TestB application is now runing under Administrator credentials and it does the some admin activities like loading driver (.sys file). But while running TestB application with Admin credentails am unable to load driver i.e it fails to load driver.
Above application is running with following conditions.
i) Application should run in Standard User mode.
ii) UAC i.e. Admin Approval mode is enabled.
Now my question is whehter above approach is correct or Do I need to incorporate manifest file for admin ELEVATION?
Thanks
SNI
jhghjghj
modified on Wednesday, October 22, 2008 4:28 AM
|
|
|
|
|
Yes, I would have thought that the TestB app will need a manifest so vista knows that it needs to be elevated.
SNI wrote: it fails to load driver.
Perhaps if you post the exception message, stack trace and other details somebody might have come across the same problem before.
Simon
|
|
|
|
|
I have configured manifest file for TestB applciation as requestLevel = 'requireAdministrator' and while running this application it will prompt for admin password. when user provides this pass word then I am able to perform admin activities.
But i dont want to know admin password the end user. Please let me know is there any way in vista by which we can provide admin credentials to the processes without user intervention.
jhghjghj
|
|
|
|
|
SNI wrote: Please let me know is there any way in vista by which we can provide admin credentials to the processes without user intervention.
No, there isn't.
That is the whole point.
If the user is an admin, they will be prompted and will have to click OK.
If the user is not an admin, they will be prompted and have to enter the admin password.
This is a security feature. The only way to avoid the UAC prompts is to disable UAC. Disabling UAC is a setting that the user chooses, and you can't guarantee your users will have it disabled. You should write your program so it works fine with UAC turned on.
If you want your program to do admin tasks, you have to put up with the UAC prompts. This is just how vista works.
Simon
|
|
|
|
|
thanks. what about powershell scripting? I read that it helps in removing prompting user to provide Admin credentials. Do you have any idea?
jhghjghj
modified on Wednesday, October 22, 2008 4:33 AM
|
|
|
|
|
No. There is no way to prevent the UAC prompts from happening.
The user can disable them, but that is their choice. You cannot just have them disabled for your application.
Simon
|
|
|
|
|
I'm having a problem with the file properties Summary Tab being turned off on Zip files only. I've read some threads linking this to the recent SP3 update for XP, but I haven't found a way to re-enable the tab. The message I get on the Zip file Summary Tab (for all Zip files) is "Summary properties are unavailable for the selected source(s)."
I have a second PC running XP Professional as well and the SP3 Update didn't complete. The Summary Tab is working fine on that computer. Any one have any suggestions?
|
|
|
|
|
|
Hi,
i am a web developer and i have been asked to program a stupid batch, but i am totally ignorant in that..
I can say that i have thousands of Xml Files into a folder, i designed a XSL transformation and i need to apply the transformation to all these files.
1. I downloaded msXsl and works great
2. I made a little batch calling msXsl in this way:
msxsl.exe %1 %2 -o %3.xml
This is working and saves my source file in a modified Xml file (through my Xsl transformation).
The point is that i need another batch wrapping this one, and basically it should invoke this one and pass as a parameter the names of all the files in the folder.
Any help is really appreciated.
Dave
|
|
|
|
|
Use "Call" and the name of the batchfile to start it in the same environment, "focus" is returned to the calling batch as soon as the called batch exits.
Use "Start" and the name of the batchfile to start it in a new environment that runs independantly from the original batchfile.
|
|
|
|
|
I've got a file that is 66 GB. (it is a virtual box VDI file)
I want to move it from the drive I created it on, to another drive (with 70+ GB available).
Always, after copying between 55 to 62 GB (NOT near 2^N), it fails with a "Delayed Write Failed" error.
The target drive is set to write through the cache.
I can still see the drive through other means, so it is not dead.
I have run diagnostics, and the drive does not own up to any problems.
I have tried copying it with explorer.
I have written a program that copies, reading, writing and flushing a meg at a time.
Always the same result
I zipped it, and copied it to another machine, and tried to unzip it. (Its about 8 GB compressed)
When unzipping, it writes around 60 - 62 GB into the target, and starts having delayed write failed error.
So now we are on a totally different system, and it is generating the same type of error at roughly the same file size, on three different disks.
I have also tried unzipping it on a W2K3 machine, and that went fine.
Now I am trying to push it from the W2K3 machine to the XP Pro machine.
NTFS is supposed to handle files with more bytes than there are grains of sand (give or take 15  )
Is there some limit with XP on how big a single write session can be, or some other limit I might be hitting?
TIA
Richard
Silver member by constant and unflinching longevity.
|
|
|
|
|
|
I cna't comment on the technicalities of why it might be failing, but I can suggest a workaround:
TeraCopy[^]
A gem of a utility IMHO
|
|
|
|
|
Delayed write errors simply mean write errors that occurred when the system tried to write back from cache to the disk. The system caches writes in order to consolidate them, to maximise writing performance, and to support fast reads back from recently-written locations.
The problem is with the disk hardware, not the OS.
"Multithreading is just one damn thing after, before, or simultaneous with another." - Andrei Alexandrescu
|
|
|
|
|
Normally I would agree with you - but I have tried it on multiple hard disks, XP chokes on all of them.
I have run full diagnostics on the disks, and there are no problems with them. SMART thinks they have no issues, as well. This is something intrinsic to XP, not the drives.
Silver member by constant and unflinching longevity.
|
|
|
|
|
This is something specific to your machine/Windows installation. I've written some tests creating and copying 80GB files between drives without any issues.
|
|
|
|
|
I could see that, but they are plain vanilla XP Pro SP2 installs. One on a Dell, and one on a ThinkPad.
Both act the same. Win 2K3 does not.
Silver member by constant and unflinching longevity.
|
|
|
|
|
Do you have some anti-virus/anti-spyware software or some disk management tools, like Diskeeper, installed on these machines?
|
|
|
|
|
Dave,
Thank you.
Stupid me, of course if there is an apparent OS issue, I should have checked at least anti virus first. I must not be thinking straight to have missed checking that. 
I have SmartDefrag running on both the XP machines, but not the 2k3 machine, and symantec endpoint on the thinkpad. I'll turn all them off and try again.
Richard
Silver member by constant and unflinching longevity.
|
|
|
|
|
When I start an application (details below) from a mapped network drive (e.x. "Z:\software\myapplication.exe") and while working with said application the network connection is disrupted (e.x. because I pull my network cable) then after some random amount of time my application will "vanish" - no error messages, no log entries, no nothing, simply gone. Why that?!?
The application is a pretty normal MFC based application made with VC++ 2003 using a couple of DLLs (MFC redistributables stuff and stuff you need to integrate a simplistic Subversion client into it) with everything being in the very same director ("Z:\software\myapplication.exe", "Z:\software\mfc71.dll", "Z:\software\intl3_svn.dll", etc.). The network drive itself is hosted on a Samba server and I am using a fully updated WindowsXP.
|
|
|
|
|
Are there any DLLs in the startup directory, or does it store any temp files there?
Silver member by constant and unflinching longevity.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
