No Clean Feed - Stop Internet Censorship in Australia
Skip to content

Troubleshooting an Extraneous UAC Prompt

15-Oct-08

Even though I log onto my domain machine with a standard user account, I’ve been prompted by UAC to elevate when running Registry Editor. After putting up with it for a couple of months, I finally got around to doing something to fix it today.

To see what was going on I used Process Explorer to see the differences in privileges between a standard process and an elevated Registry Editor. Here’s Notepad running with my standard token:

Notepad

And here’s REGEDIT running with the elevated token. As you can see, the difference is the SeLoadDriverPrivilege privilege:

Regedit

I use TrueCrypt to protect data on one of my USB thumb drives. TrueCrypt, of course, loads a driver when you mount an encrypted disk, and some time back I had been attempting to avoid the UAC prompt involved with mounting the encrypted disk. Sure enough when I took a look in the Local Security Policy editor (SECPOL.MSC), I had given the Users group the ability to Load and unload device drivers:

LoadDriverPrivilege

Removing the right for the Users group, didn’t help me with TrueCrypt, but at least now I can open REGEDIT (which I use far more often) without a UAC prompt.

Tomorrow: Developing and Running As Non-Admin

14-Oct-08

At the next Vista Squad meeting tomorrow night (Wednesday 15th October), along with Ray Booysen, I’ll be presenting on User Account Control and developing & running as non-admin. There’s a few things we’ll cover, including:

  • User Account Control – what it is and what it isn’t. With any luck we might have time to compare UAC to similar elevation processes in Linux and Mac OS
  • Developing applications on Windows Vista as non-admin. Does Visual Studio work as non-admin?
  • What challenges IT pros face when deploying applications that expect admin access

One of the great strengths of Vista Squad is that it gets both IT pros and Developers together in the same room, so I’m hoping to make this an open discussion rather that just a presentation.

That means though, we need you. There’s usually more devs than IT pros, so if you’re in London tomorrow night and you’re interested in coming along, you can sign up here.

App-V Management Pack for OpsMgr 2007

10-Oct-08

Now this looks good: Microsoft Application Virtualization Management Pack for Systems Center Operations Manager 2007. If you’re deploying applications via any virtualisation/streaming solution, monitoring is essential.

The Microsoft Application Virtualization 4.5 (App-V) Management Pack enables IT professionals to use Microsoft System Center Operations Manager 2007 to monitor App-V server systems. The Management Pack is designed to maximize Application Virtualization Server availability for handling Application Virtualization Client requests. This component delivers an enterprise-level solution to proactively monitor Microsoft Application Virtualization 4.5 server systems.

Feature Summary

  • Monitor and detect Application Virtualization service failures. 
  • Monitor connectivity errors with external App-V dependent services such as SQL and Active Directory Domain Services. 
  • Monitor when the backlog of queued requests crosses thresholds. 
  • Monitor the general health state of the App-V Server. 
  • Monitor machine-wide health metrics as related to App-V Server components. 
  • Visually monitor trends in the backlog of queued requests on App-V Servers. 
  • Monitor the number and type of alerts across the App-V infrastructure. 
  • Monitor response time when communicating with external services. 

Windows Vista Application Compatibility Downloadable List

10-Oct-08

Here’s a download that’s quite timely as I’m looking at application compatibility as a component of my Windows Vista deployment project: Windows Vista Application Compatibility Downloadable List for IT Professionals

The Application Compatibility List for IT Professionals is a Microsoft Office Excel-based spreadsheet containing software applications which have earned the status of “Certified for Windows Vista” or “Works with Windows Vista.” 

Additionally, this list contains applications with a status of “Compatible.” “Compatible” means that the application has been reported by the publisher as compatible with, or supported on, Windows Vista. These applications have not gone through the Microsoft Windows Vista Logo Program. 

The Application Compatibility List for IT Professionals is current as of July 31,2008 and published as of the Date Published..