Asking for Admin-Rights

[GReaper]

I was wondering: How can a Windows program ask for permission from the user to get administrator rights? I know there's an option when you right-click the exe, but can the program do it from the inside?

I'm asking because I want to create a Setup-like program but I can't write to Program Files if i don't have administrator rights...

Anyways, thanks for all those future answers!

[CommonTater]

You need to include a manifest in the installer program's resources...
Or, for console proggys, in a file with the program name + .manifest (eg. FixUp.exe.Manifest)
Put the file in the same folder as the executable.

  <?xml version="1.0" encoding="UTF-8" standalone="yes" ?> 
     - <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
          <assemblyIdentity type="win32" 
                             name="Program name" 
                            version="1.0.0.0" 
                            processorArchitecture="X86" /> 
         <description>Program Description</description> 
- <dependency>
     - <dependentAssembly>
            <assemblyIdentity type="win32" 
                         name="Microsoft.Windows.Common-Controls" 
                         version="6.0.0.0" 
                         processorArchitecture="X86" 
                         publicKeyToken="6595b64144ccf1df" language="*" /> 
        </dependentAssembly>
    </dependency>
- <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
     - <security>
         - <requestedPrivileges>
              <requestedExecutionLevel level="asInvoker" uiAccess="false" /> 
              </requestedPrivileges>
       </security>
    </trustInfo>
  </assembly>

You should copy this more or less as is... You will need to change the parts in red to describe your own program and version... You may also have to change the processor architectures (eg. x64 for 64bit, but there are others).

The part marked in blue is the "desired access"... in an installer you should be ok with "asInvoker" but you might also try "HighestAvailable".

[GReaper]

Thanks!!

[CommonTater]

Thanks!!

You're welcome...

I forgot to mention that you'll need a copy of this in your runtime EXEs as well, unless you want them triggering the UAC all the time....

[adeyblue]

"asInvoker" won't give you admin rights unless Explorer (or whatever app they use to run yours) is already running with admin rights. "HighestAvailable" will only prompt for admin consent if the user is part of the admin group, otherwise it'll run with standard permissions. The only reliable way is to use requireAdministrator, which does what it says.

If you don't have that section in a manifest and put the word 'setup' in the filename, Windows will sort it all out for you in the name of compatability. Of course, that's not recommended but it exists.

Or, for console proggys, in a file with the program name + .manifest (eg. FixUp.exe.Manifest)

You can use both methods for each type of program. All exes are created equal.

[CommonTater]

"asInvoker" won't give you admin rights unless Explorer (or whatever app they use to run yours) is already running with admin rights. "HighestAvailable" will only prompt for admin consent if the user is part of the admin group, otherwise it'll run with standard permissions. The only reliable way is to use requireAdministrator, which does what it says.

If you don't have that section in a manifest and put the word 'setup' in the filename, Windows will sort it all out for you in the name of compatability. Of course, that's not recommended but it exists.

Excellent.... then "requireAdministrator" in the installer and "asInvoker" in the programs...

You can use both methods for each type of program. All exes are created equal.

That depends on the compiler... not all of them will let you add resources to console apps.

Thanks for the extra info.

[GReaper]

Thank you both. I believe i have enough info to proceed.

[CommonTater]

No worries...

And thanks to AdeyBlue for "requireAdministrator" ... ya learns something new every day!