VW and Vista.
Locked
 
|
I wonder if anybody had their VW based application running on Vista and
they were bitten by Vista UAC and file virtualization ? Or maybe I am the lucky one in this regard.... Anyway here are few questions I'd like to ask: 1. Is it possible to see what privilege level the VW application is running i.e User, Administrator, Power USer, etc. from inside of the VW, have anybody done it ? 1.a is it possible to elevate the VW process to the highest available to the User Logon. Vista tends to start application in the "User" even if the Logon belongs to the administrators. Have anybody done that ? via DLLCC call or manifest, or ... ? 2. Here is a quote from VSE list, but it does apply to the VW applications. we see all the same problems when our application is installed on Vista > we are increasingly struggling with complex security settings on files and folders under NTFS with the complex UAC flavors and new folder structure added in Vista not making life much easier. > Now that we restructured our app not to attempt to write anything to the program folders hierarchy and instead use the ProgramData and common documents folders, we found that certain files created during the installation were still not modifiable by a user (as we cannot create a thread from inside VSE that offers an elevation dialog). > If anyone has created a nice FileSystem extension taking NTFS rights management into account (reliably testing for write rights on certain files for a given user or "token", being able to change rights) I would be glad to get my hands on. I did ask that questions couple weeks ago and nobody did answer -- apparently real life issues are not as interesting to discuss.... TIA --Mark |
|
|
Mark Pirogovsky wrote:
> I wonder if anybody had their VW based application running on Vista > and they were bitten by Vista UAC and file virtualization ? Or maybe I > am the lucky one in this regard.... Yep. It's hell, because there are no simple means for setting file permissions like under Unix. Manipulating ACLs is a horror. I needed to write a DLL that provides a single function to set an ACL to "access by everyone" written in C, which is 540 lines of code(!). See: http://support.microsoft.com/kb/102102 I would recomnend to use the inheritance bit for folders. This will imply the inclusion of all files below a certain (installation) folder. > 1. Is it possible to see what privilege level the VW application is > running i.e User, Administrator, Power USer, etc. from inside of the > VW, have anybody done it ? Probably yes, but after hours of struggle I gave up on this. Try writing to a registry key that is admin-only and catch the error. The error indicates that the user is /not/ admin. > 1.a is it possible to elevate the VW process to the highest > available to the User Logon. Vista tends to start application in the > "User" even if the Logon belongs to the administrators. Have anybody > done that ? via DLLCC call or manifest, or ... ? Yes. Use a manifest (XML code), compile it with RC.exe and add it as a binary resource to the VM executable with ResHacker: <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity name="ExecutableName.exe" version="1.0.0" processorArchitecture="X86" type="win32" /> <description>Application Description</description> <!-- Identify the application security requirements. --> <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> <ms_asmv2:security> <ms_asmv2:requestedPrivileges> <ms_asmv2:requestedExecutionLevel level="requireAdministrator" /> </ms_asmv2:requestedPrivileges> </ms_asmv2:security> </ms_asmv2:trustInfo> </assembly> HTH Andre |
|
|
Andre,
Thanks for the hint on manifests. Do you remember to what resource id should I install the compiled manifest(like icon is #323 or image is 332) ? Conspicuously there is no word on the subject from the Cincom folks -- I wonder why --Mark Andre Schnoor wrote: > Mark Pirogovsky wrote: >> I wonder if anybody had their VW based application running on Vista >> and they were bitten by Vista UAC and file virtualization ? Or maybe I >> am the lucky one in this regard.... > > Yep. It's hell, because there are no simple means for setting file > permissions like under Unix. Manipulating ACLs is a horror. I needed to > write a DLL that provides a single function to set an ACL to "access by > everyone" written in C, which is 540 lines of code(!). > > See: http://support.microsoft.com/kb/102102 > > I would recomnend to use the inheritance bit for folders. This will > imply the inclusion of all files below a certain (installation) folder. > > >> 1. Is it possible to see what privilege level the VW application is >> running i.e User, Administrator, Power USer, etc. from inside of the >> VW, have anybody done it ? > > Probably yes, but after hours of struggle I gave up on this. Try writing > to a registry key that is admin-only and catch the error. The error > indicates that the user is /not/ admin. > > >> 1.a is it possible to elevate the VW process to the highest >> available to the User Logon. Vista tends to start application in the >> "User" even if the Logon belongs to the administrators. Have anybody >> done that ? via DLLCC call or manifest, or ... ? > > Yes. Use a manifest (XML code), compile it with RC.exe and add it as a > binary resource to the VM executable with ResHacker: > > <?xml version="1.0" encoding="UTF-8" standalone="yes"?> > <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> > <assemblyIdentity > name="ExecutableName.exe" > version="1.0.0" > processorArchitecture="X86" > type="win32" /> > <description>Application Description</description> > <!-- Identify the application security requirements. --> > <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> > <ms_asmv2:security> > <ms_asmv2:requestedPrivileges> > <ms_asmv2:requestedExecutionLevel level="requireAdministrator" /> > </ms_asmv2:requestedPrivileges> > </ms_asmv2:security> > </ms_asmv2:trustInfo> > </assembly> > > HTH > > Andre > > > |
Re: VW and Vista.
|
|
In reply to this post by Mark Pirogovsky-3
Are you sure vista is already supported? Maybe in 7.6, |
|
|
In reply to this post by Mark Pirogovsky-3
Jim,
I did not see any noticeable slowdowns for VW applications, but then I use the command line such as "vw741.exe -h 12m -z 4m" to keep recompiling to the minimum and to preallocate memory upfront. What I see is quite annoying in general: very recent computer with Vista (dual core, plenty or Ram, SATA, etc...) feel more sluggish then my two year old workstation with XP. Another problem with Vista is writing to the files(when you can write them) -- it take s few times longer than the same operation on XP, and, further more, sometime the application writes to the file and returns, but when you look in the Explorer the file is not there. There is something about the file virtualization which does cause this, I am trying to figure out how to force my app to bypass that virtualization nonsense. --Mark Jim Thompson wrote: > A couple of the machines we have tried to run VW7.4.1 with Oracle run > 100x slower on Vista than on XP. Essentially unusable. > > > > > Mark Pirogovsky wrote: >> >> I wonder if anybody had their VW based application running on Vista >> and they were bitten by Vista UAC and file virtualization ? Or maybe I >> am the lucky one in this regard.... >> >> >> Anyway here are few questions I'd like to ask: >> >> 1. Is it possible to see what privilege level the VW application is >> running i.e User, Administrator, Power USer, etc. from inside of the >> VW, have anybody done it ? >> 1.a is it possible to elevate the VW process to the highest >> available to the User Logon. Vista tends to start application in the >> "User" even if the Logon belongs to the administrators. Have anybody >> done that ? via DLLCC call or manifest, or ... ? >> >> 2. Here is a quote from VSE list, but it does apply to the VW >> applications. we see all the same problems when our application is >> installed on Vista >> >>> we are increasingly struggling with complex security settings on >>> files and folders under NTFS with the complex UAC flavors and new >>> folder structure added in Vista not making life much easier. >>> Now that we restructured our app not to attempt to write anything to >>> the program folders hierarchy and instead use the ProgramData and >>> common documents folders, we found that certain files created during >>> the installation were still not modifiable by a user (as we cannot >>> create a thread from inside VSE that offers an elevation dialog). >>> If anyone has created a nice FileSystem extension taking NTFS rights >>> management into account (reliably testing for write rights on certain >>> files for a given user or "token", being able to change rights) I >>> would be glad to get my hands on. >> >> >> I did ask that questions couple weeks ago and nobody did answer -- >> apparently real life issues are not as interesting to discuss.... >> >> >> TIA >> >> --Mark >> > |
|
|
In reply to this post by Boris Popov, DeepCove Labs (SNN)
Well,
When you tell your clients - "Sorry guys, we do not support Vista yet, and we do not know when..." they tell you that the only new PC they can get, comes loaded with Vista. So you may lose potential or even existing client... Most of the people can not even get new PC with XP. It used to be possible to order Dell or HP with XP instead of Vista, but increasing number of models don't have XP drivers available. I recently help friend of mine to downgrade His brand new HP desktop to XP. I had to hunt for the appropriate drivers all over different manufacturers website and message boards - not experience one would recommend to the friend less so to the clients Boris Popov wrote: > > > Are you sure vista is already supported? Maybe in 7.6, > > > Cheers! > > -Boris > (Sent from a BlackBerry) > > ----- Original Message ----- > From: Mark Pirogovsky <[hidden email]> > To: Andre Schnoor <[hidden email]> > Cc: VWNC <[hidden email]> > Sent: Mon Nov 19 08:16:35 2007 > Subject: Re: VW and Vista. > > Andre, > Thanks for the hint on manifests. Do you remember to what resource id > should I install the compiled manifest(like icon is #323 or image is 332) ? > > > Conspicuously there is no word on the subject from the Cincom folks -- I > wonder why > > --Mark > > > Andre Schnoor wrote: > > Mark Pirogovsky wrote: > >> I wonder if anybody had their VW based application running on Vista > >> and they were bitten by Vista UAC and file virtualization ? Or maybe I > >> am the lucky one in this regard.... > > > > Yep. It's hell, because there are no simple means for setting file > > permissions like under Unix. Manipulating ACLs is a horror. I needed to > > write a DLL that provides a single function to set an ACL to "access by > > everyone" written in C, which is 540 lines of code(!). > > > > See: http://support.microsoft.com/kb/102102 > > > > I would recomnend to use the inheritance bit for folders. This will > > imply the inclusion of all files below a certain (installation) folder. > > > > > >> 1. Is it possible to see what privilege level the VW application is > >> running i.e User, Administrator, Power USer, etc. from inside of the > >> VW, have anybody done it ? > > > > Probably yes, but after hours of struggle I gave up on this. Try writing > > to a registry key that is admin-only and catch the error. The error > > indicates that the user is /not/ admin. > > > > > >> 1.a is it possible to elevate the VW process to the highest > >> available to the User Logon. Vista tends to start application in the > >> "User" even if the Logon belongs to the administrators. Have anybody > >> done that ? via DLLCC call or manifest, or ... ? > > > > Yes. Use a manifest (XML code), compile it with RC.exe and add it as a > > binary resource to the VM executable with ResHacker: > > > > <?xml version="1.0" encoding="UTF-8" standalone="yes"?> > > <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> > > <assemblyIdentity > > name="ExecutableName.exe" > > version="1.0.0" > > processorArchitecture="X86" > > type="win32" /> > > <description>Application Description</description> > > <!-- Identify the application security requirements. --> > > <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> > > <ms_asmv2:security> > > <ms_asmv2:requestedPrivileges> > > <ms_asmv2:requestedExecutionLevel level="requireAdministrator" /> > > </ms_asmv2:requestedPrivileges> > > </ms_asmv2:security> > > </ms_asmv2:trustInfo> > > </assembly> > > > > HTH > > > > Andre > > > > > > > |
Re: VW and Vista.
|
|
In reply to this post by Mark Pirogovsky-3
I guess I was pointing out that before becoming too upset with no official response on the list you should give them a chance via support, because in the times I needed urgent help before they always came through. |
|
|

We are looking at the schedule for the next release
of Cincom Smalltalk now. It will ship in Q1 2008, but I can't get more
specific than that yet.
|
|
|
In reply to this post by Boris Popov, DeepCove Labs (SNN)
Boris Popov wrote: > > > Are you sure vista is already supported? Maybe in 7.6, > > Let's see. Windows NT4 was introduced in 1995 - that is when NT line was becoming widely accepted. And the UAC policies on files and application were available then as well (it did change since, but...). The problem now is that Vista enforces many of those policies, which were seldom if ever used before. So I guess that everybody had time. As matter of fact I did ask that same question about how to determine the file access rights in windows more then a year ago - and response was just the same -- silence. Yes, it is way easier in Unix(Linux, mac) to see(ls -l) or set file access rights(chown, chmod, etc), but quite a few people use windows so we are forced to deal with it. > Cheers! > > -Boris > (Sent from a BlackBerry) > > ----- Original Message ----- > From: Mark Pirogovsky <[hidden email]> > To: Andre Schnoor <[hidden email]> > Cc: VWNC <[hidden email]> > Sent: Mon Nov 19 08:16:35 2007 > Subject: Re: VW and Vista. > > Andre, > Thanks for the hint on manifests. Do you remember to what resource id > should I install the compiled manifest(like icon is #323 or image is 332) ? > > > Conspicuously there is no word on the subject from the Cincom folks -- I > wonder why > > --Mark > > > Andre Schnoor wrote: > > Mark Pirogovsky wrote: > >> I wonder if anybody had their VW based application running on Vista > >> and they were bitten by Vista UAC and file virtualization ? Or maybe I > >> am the lucky one in this regard.... > > > > Yep. It's hell, because there are no simple means for setting file > > permissions like under Unix. Manipulating ACLs is a horror. I needed to > > write a DLL that provides a single function to set an ACL to "access by > > everyone" written in C, which is 540 lines of code(!). > > > > See: http://support.microsoft.com/kb/102102 > > > > I would recomnend to use the inheritance bit for folders. This will > > imply the inclusion of all files below a certain (installation) folder. > > > > > >> 1. Is it possible to see what privilege level the VW application is > >> running i.e User, Administrator, Power USer, etc. from inside of the > >> VW, have anybody done it ? > > > > Probably yes, but after hours of struggle I gave up on this. Try writing > > to a registry key that is admin-only and catch the error. The error > > indicates that the user is /not/ admin. > > > > > >> 1.a is it possible to elevate the VW process to the highest > >> available to the User Logon. Vista tends to start application in the > >> "User" even if the Logon belongs to the administrators. Have anybody > >> done that ? via DLLCC call or manifest, or ... ? > > > > Yes. Use a manifest (XML code), compile it with RC.exe and add it as a > > binary resource to the VM executable with ResHacker: > > > > <?xml version="1.0" encoding="UTF-8" standalone="yes"?> > > <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> > > <assemblyIdentity > > name="ExecutableName.exe" > > version="1.0.0" > > processorArchitecture="X86" > > type="win32" /> > > <description>Application Description</description> > > <!-- Identify the application security requirements. --> > > <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> > > <ms_asmv2:security> > > <ms_asmv2:requestedPrivileges> > > <ms_asmv2:requestedExecutionLevel level="requireAdministrator" /> > > </ms_asmv2:requestedPrivileges> > > </ms_asmv2:security> > > </ms_asmv2:trustInfo> > > </assembly> > > > > HTH > > > > Andre > > > > > > > |
|
|
In reply to this post by James Robertson-7
Thanks James,
Do you think any of the Vista related Issues would get addressed with the upcoming release ? I know you did publish some upcoming features list for the 7.6. Would you share them again, so every one can plan their development efforts accordingly. One thing I hate the most, when I spent time and effort addressing something, when that problem will be addressed by vendor in potentially more general and probably better way... --Mark James Robertson wrote: > > We are looking at the schedule for the next release of Cincom Smalltalk > now. It will ship in Q1 2008, but I can't get more specific than that yet. > > ----- Original Message ----- > *From:* Boris Popov <mailto:[hidden email]> > *To:* [hidden email] <mailto:[hidden email]> > *Cc:* [hidden email] <mailto:[hidden email]> > *Sent:* Monday, November 19, 2007 11:37 AM > *Subject:* Re: VW and Vista. > > I guess I was pointing out that before becoming too upset with no > official response on the list you should give them a chance via > support, because in the times I needed urgent help before they > always came through. > > Cheers! > > -Boris > (Sent from a BlackBerry) > > ----- Original Message ----- > From: Mark Pirogovsky <[hidden email] > <mailto:[hidden email]>> > To: Boris Popov > Cc: [hidden email] <mailto:[hidden email]> <[hidden email] > <mailto:[hidden email]>> > Sent: Mon Nov 19 08:35:39 2007 > Subject: Re: VW and Vista. > > Well, > When you tell your clients - "Sorry guys, we do not support Vista yet, > and we do not know when..." they tell you that the only new PC they can > get, comes loaded with Vista. > So you may lose potential or even existing client... > > Most of the people can not even get new PC with XP. It used to be > possible to order Dell or HP with XP instead of Vista, but increasing > number of models don't have XP drivers available. > > I recently help friend of mine to downgrade His brand new HP desktop > to XP. I had to hunt for the appropriate drivers all over different > manufacturers website and message boards - not experience one would > recommend to the friend less so to the clients > > Boris Popov wrote: > > > > > > Are you sure vista is already supported? Maybe in 7.6, > > > > > > Cheers! > > > > -Boris > > (Sent from a BlackBerry) > > > > ----- Original Message ----- > > From: Mark Pirogovsky <[hidden email]> > > To: Andre Schnoor <[hidden email]> > > Cc: VWNC <[hidden email]> > > Sent: Mon Nov 19 08:16:35 2007 > > Subject: Re: VW and Vista. > > > > Andre, > > Thanks for the hint on manifests. Do you remember to what > resource id > > should I install the compiled manifest(like icon is #323 or image > is 332) ? > > > > > > Conspicuously there is no word on the subject from the Cincom > folks -- I > > wonder why > > > > --Mark > > > > > > Andre Schnoor wrote: > > > Mark Pirogovsky wrote: > > >> I wonder if anybody had their VW based application running on > Vista > > >> and they were bitten by Vista UAC and file virtualization ? > Or maybe I > > >> am the lucky one in this regard.... > > > > > > Yep. It's hell, because there are no simple means for setting file > > > permissions like under Unix. Manipulating ACLs is a horror. I > needed to > > > write a DLL that provides a single function to set an ACL to > "access by > > > everyone" written in C, which is 540 lines of code(!). > > > > > > See: http://support.microsoft.com/kb/102102 > > > > > > I would recomnend to use the inheritance bit for folders. This > will > > > imply the inclusion of all files below a certain > (installation) folder. > > > > > > > > >> 1. Is it possible to see what privilege level the VW > application is > > >> running i.e User, Administrator, Power USer, etc. from inside > of the > > >> VW, have anybody done it ? > > > > > > Probably yes, but after hours of struggle I gave up on this. > Try writing > > > to a registry key that is admin-only and catch the error. The > error > > > indicates that the user is /not/ admin. > > > > > > > > >> 1.a is it possible to elevate the VW process to the highest > > >> available to the User Logon. Vista tends to start application > in the > > >> "User" even if the Logon belongs to the administrators. Have > anybody > > >> done that ? via DLLCC call or manifest, or ... ? > > > > > > Yes. Use a manifest (XML code), compile it with RC.exe and add > it as a > > > binary resource to the VM executable with ResHacker: > > > > > > <?xml version="1.0" encoding="UTF-8" standalone="yes"?> > > > <assembly xmlns="urn:schemas-microsoft-com:asm.v1" > manifestVersion="1.0"> > > > <assemblyIdentity > > > name="ExecutableName.exe" > > > version="1.0.0" > > > processorArchitecture="X86" > > > type="win32" /> > > > <description>Application Description</description> > > > <!-- Identify the application security requirements. --> > > > <ms_asmv2:trustInfo > xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> > > > <ms_asmv2:security> > > > <ms_asmv2:requestedPrivileges> > > > <ms_asmv2:requestedExecutionLevel > level="requireAdministrator" /> > > > </ms_asmv2:requestedPrivileges> > > > </ms_asmv2:security> > > > </ms_asmv2:trustInfo> > > > </assembly> > > > > > > HTH > > > > > > Andre > > > > > > > > > > > > |
|
|
I'll need a better idea as to what you are getting at :)
----- Original Message ----- From: "Mark Pirogovsky" <[hidden email]> To: <[hidden email]> Cc: "James Robertson" <[hidden email]> Sent: Monday, November 19, 2007 12:31 PM Subject: Re: VW and Vista. > Thanks James, > > Do you think any of the Vista related Issues would get addressed with the > upcoming release ? > > I know you did publish some upcoming features list for the 7.6. Would you > share them again, so every one can plan their development efforts > accordingly. > > One thing I hate the most, when I spent time and effort addressing > something, when that problem will be addressed by vendor in potentially > more general and probably better way... > > --Mark > > James Robertson wrote: >> >> We are looking at the schedule for the next release of Cincom Smalltalk >> now. It will ship in Q1 2008, but I can't get more specific than that >> yet. >> >> ----- Original Message ----- >> *From:* Boris Popov <mailto:[hidden email]> >> *To:* [hidden email] <mailto:[hidden email]> >> *Cc:* [hidden email] <mailto:[hidden email]> >> *Sent:* Monday, November 19, 2007 11:37 AM >> *Subject:* Re: VW and Vista. >> >> I guess I was pointing out that before becoming too upset with no >> official response on the list you should give them a chance via >> support, because in the times I needed urgent help before they >> always came through. >> >> Cheers! >> >> -Boris >> (Sent from a BlackBerry) >> >> ----- Original Message ----- >> From: Mark Pirogovsky <[hidden email] >> <mailto:[hidden email]>> >> To: Boris Popov >> Cc: [hidden email] <mailto:[hidden email]> <[hidden email] >> <mailto:[hidden email]>> >> Sent: Mon Nov 19 08:35:39 2007 >> Subject: Re: VW and Vista. >> >> Well, >> When you tell your clients - "Sorry guys, we do not support Vista >> yet, >> and we do not know when..." they tell you that the only new PC they >> can >> get, comes loaded with Vista. >> So you may lose potential or even existing client... >> >> Most of the people can not even get new PC with XP. It used to be >> possible to order Dell or HP with XP instead of Vista, but increasing >> number of models don't have XP drivers available. >> >> I recently help friend of mine to downgrade His brand new HP desktop >> to XP. I had to hunt for the appropriate drivers all over >> different >> manufacturers website and message boards - not experience one would >> recommend to the friend less so to the clients >> >> Boris Popov wrote: >> > >> > >> > Are you sure vista is already supported? Maybe in 7.6, >> > >> > >> > Cheers! >> > >> > -Boris >> > (Sent from a BlackBerry) >> > >> > ----- Original Message ----- >> > From: Mark Pirogovsky <[hidden email]> >> > To: Andre Schnoor <[hidden email]> >> > Cc: VWNC <[hidden email]> >> > Sent: Mon Nov 19 08:16:35 2007 >> > Subject: Re: VW and Vista. >> > >> > Andre, >> > Thanks for the hint on manifests. Do you remember to what >> resource id >> > should I install the compiled manifest(like icon is #323 or image >> is 332) ? >> > >> > >> > Conspicuously there is no word on the subject from the Cincom >> folks -- I >> > wonder why >> > >> > --Mark >> > >> > >> > Andre Schnoor wrote: >> > > Mark Pirogovsky wrote: >> > >> I wonder if anybody had their VW based application running on >> Vista >> > >> and they were bitten by Vista UAC and file virtualization ? >> Or maybe I >> > >> am the lucky one in this regard.... >> > > >> > > Yep. It's hell, because there are no simple means for setting >> file >> > > permissions like under Unix. Manipulating ACLs is a horror. I >> needed to >> > > write a DLL that provides a single function to set an ACL to >> "access by >> > > everyone" written in C, which is 540 lines of code(!). >> > > >> > > See: http://support.microsoft.com/kb/102102 >> > > >> > > I would recomnend to use the inheritance bit for folders. This >> will >> > > imply the inclusion of all files below a certain >> (installation) folder. >> > > >> > > >> > >> 1. Is it possible to see what privilege level the VW >> application is >> > >> running i.e User, Administrator, Power USer, etc. from inside >> of the >> > >> VW, have anybody done it ? >> > > >> > > Probably yes, but after hours of struggle I gave up on this. >> Try writing >> > > to a registry key that is admin-only and catch the error. The >> error >> > > indicates that the user is /not/ admin. >> > > >> > > >> > >> 1.a is it possible to elevate the VW process to the highest >> > >> available to the User Logon. Vista tends to start application >> in the >> > >> "User" even if the Logon belongs to the administrators. Have >> anybody >> > >> done that ? via DLLCC call or manifest, or ... ? >> > > >> > > Yes. Use a manifest (XML code), compile it with RC.exe and add >> it as a >> > > binary resource to the VM executable with ResHacker: >> > > >> > > <?xml version="1.0" encoding="UTF-8" standalone="yes"?> >> > > <assembly xmlns="urn:schemas-microsoft-com:asm.v1" >> manifestVersion="1.0"> >> > > <assemblyIdentity >> > > name="ExecutableName.exe" >> > > version="1.0.0" >> > > processorArchitecture="X86" >> > > type="win32" /> >> > > <description>Application Description</description> >> > > <!-- Identify the application security requirements. --> >> > > <ms_asmv2:trustInfo >> xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> >> > > <ms_asmv2:security> >> > > <ms_asmv2:requestedPrivileges> >> > > <ms_asmv2:requestedExecutionLevel >> level="requireAdministrator" /> >> > > </ms_asmv2:requestedPrivileges> >> > > </ms_asmv2:security> >> > > </ms_asmv2:trustInfo> >> > > </assembly> >> > > >> > > HTH >> > > >> > > Andre >> > > >> > > >> > > >> > >> > |
|
|
In reply to this post by Mark Pirogovsky-3
Hi Mark, this is my template for "maifest.rc"
#define RT_MANIFEST 24 #define CREATEPROCESS_MANIFEST_RESOURCE_ID 1 CREATEPROCESS_MANIFEST_RESOURCE_ID RT_MANIFEST "{MANIFEST}" where {MANIFEST} needs to be replaced with the XML filename. HTH Andre Mark Pirogovsky wrote: > Andre, > Thanks for the hint on manifests. Do you remember to what resource id > should I install the compiled manifest(like icon is #323 or image is > 332) ? > > > Conspicuously there is no word on the subject from the Cincom folks -- > I wonder why > > --Mark > > > Andre Schnoor wrote: >> Mark Pirogovsky wrote: >>> I wonder if anybody had their VW based application running on Vista >>> and they were bitten by Vista UAC and file virtualization ? Or maybe >>> I am the lucky one in this regard.... >> >> Yep. It's hell, because there are no simple means for setting file >> permissions like under Unix. Manipulating ACLs is a horror. I needed >> to write a DLL that provides a single function to set an ACL to >> "access by everyone" written in C, which is 540 lines of code(!). >> >> See: http://support.microsoft.com/kb/102102 >> >> I would recomnend to use the inheritance bit for folders. This will >> imply the inclusion of all files below a certain (installation) folder. >> >> >>> 1. Is it possible to see what privilege level the VW application is >>> running i.e User, Administrator, Power USer, etc. from inside of the >>> VW, have anybody done it ? >> >> Probably yes, but after hours of struggle I gave up on this. Try >> writing to a registry key that is admin-only and catch the error. The >> error indicates that the user is /not/ admin. >> >> >>> 1.a is it possible to elevate the VW process to the highest >>> available to the User Logon. Vista tends to start application in the >>> "User" even if the Logon belongs to the administrators. Have >>> anybody done that ? via DLLCC call or manifest, or ... ? >> >> Yes. Use a manifest (XML code), compile it with RC.exe and add it as >> a binary resource to the VM executable with ResHacker: >> >> <?xml version="1.0" encoding="UTF-8" standalone="yes"?> >> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" >> manifestVersion="1.0"> >> <assemblyIdentity >> name="ExecutableName.exe" >> version="1.0.0" >> processorArchitecture="X86" >> type="win32" /> >> <description>Application Description</description> >> <!-- Identify the application security requirements. --> >> <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"> >> <ms_asmv2:security> >> <ms_asmv2:requestedPrivileges> >> <ms_asmv2:requestedExecutionLevel level="requireAdministrator" /> >> </ms_asmv2:requestedPrivileges> >> </ms_asmv2:security> >> </ms_asmv2:trustInfo> >> </assembly> >> >> HTH >> >> Andre >> >> >> > -- Andre Schnoor Cognitone GmbH www.cognitone.com |
|
|
In reply to this post by Mark Pirogovsky-3
Mark Pirogovsky wrote:
> > Yes, it is way easier in Unix(Linux, mac) to see(ls -l) or set file > access rights(chown, chmod, etc), but quite a few people use windows so > we are forced to deal with it. > From what I remember, HP-UX used to have an ACL mechanism on top of the usual file permissions (lsacl, chacl) which is probably more akin to the Windows way of doing things. In general applications weren't written to use that, either, as it wasn't the 'usual' way things were done. Graham. |
| Free forum by Nabble | Edit this page |