Adding a manifest to a legacy app (from an administrators point ofview)

Discussion in 'Windows Vista Administration' started by Thorsten Butz, Sep 2, 2007.

  1. I'd like to know if there is a general way to add a valid manifest to a
    legacy app.

    Consider I'm an admin and I simply have a "application.exe"-file and I
    want to add a manifest which tells the OS wether or not to elevate the
    user's rights, e.g.:

    <requestedPrivileges>
    <requestedExecutionLevel
    level="highestAvailable"
    uiAccess="false"
    />
    </requestedPrivileges>

    Is that possible or do I need the source-code?

    Regards,
    Thorsten
     
    Thorsten Butz, Sep 2, 2007
    #1
    1. Advertisements

  2. RE: Adding a manifest to a legacy app (from an administrators point of view)

    Hello Thorsten,

    Thank you for using newsgroup!

    Based on your requirement, I suggest you refer to the following resources:

    If you are a Microsoft Empowered, Certified, or Gold Partner, you may use
    your advisory benefits on technical issues for Vista Logo Certification.
    Global Partner Support has assembled a team to specifically provide Vista
    Logo Certification advisory service. We will advise you at a technical
    level for each Test Case and help you get through the Vista Logo
    Cerification process.

    Provide your Microsoft Partner Id when you contact Global Partner Support,
    and a Microsoft support case will be created.

    To contact ISV Global Partner Support Team:
    Email:
    ISV Advisory Services Phone: 1-800-426-9400 Option 1, Ext 84153


    Registered only partners may receive 10 advisory hours of email support
    accessed from the "Innovate on Vista" website link below. Learn more about
    the Vista Logo Certification promotion and sign up as a Microsoft
    Registered Partner at: www.InnovateOnVista.com

    There are many benefits of getting your Windows Application Vista Logo
    Certified. One benefit is you will qualify to become a Certified Partner.
    ISV Global Partner Support also provides architectural guidance, custom
    workshops, migration best practices, assistance with proof of concepts, and
    code samples.

    Microsoft Partner Program Website:
    https://partner.microsoft.com/US/partner

    933305: Applications that have earned the "Certified for Windows Vista"
    logo or the "Works with Windows Vista" logo
    http://support.microsoft.com/kb/933305/en-us

    Application Compatibility and Partners
    http://technet.microsoft.com/en-us/windowsvista/aa905104.aspx

    Thanks & Regards,

    Ken Zhao

    Microsoft Online Support
    Microsoft Global Technical Support Center

    Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.





    --------------------
    | Date: Sun, 02 Sep 2007 17:06:19 +0200
    | From: Thorsten Butz <>
    | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
    | MIME-Version: 1.0
    | Subject: Adding a manifest to a legacy app (from an administrators point
    of
    | view)
    | Content-Type: text/plain; charset=ISO-8859-1
    | Content-Transfer-Encoding: 7bit
    | Message-ID: <>
    | Newsgroups:
    microsoft.public.windows.vista.administration_accounts_passwords
    | NNTP-Posting-Host: dslb-084-062-142-141.pools.arcor-ip.net 84.62.142.141
    | Lines: 1
    | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.vista.administration_accounts_passwords:5254
    | X-Tomcat-NG:
    microsoft.public.windows.vista.administration_accounts_passwords
    |
    | I'd like to know if there is a general way to add a valid manifest to a
    | legacy app.
    |
    | Consider I'm an admin and I simply have a "application.exe"-file and I
    | want to add a manifest which tells the OS wether or not to elevate the
    | user's rights, e.g.:
    |
    | <requestedPrivileges>
    | <requestedExecutionLevel
    | level="highestAvailable"
    | uiAccess="false"
    | />
    | </requestedPrivileges>
    |
    | Is that possible or do I need the source-code?
    |
    | Regards,
    | Thorsten
    |
     
    Ken Zhao [MSFT], Sep 3, 2007
    #2
    1. Advertisements

  3. Re: Adding a manifest to a legacy app (from an administrators pointof view)

    Thanks for the reply, but:
    my question relates to binary applications for which I do NOT own the
    source. Is it possible to create a manifest for any existing application?

    Regards,
    Thorsten
     
    Thorsten Butz, Sep 3, 2007
    #3
  4. Re: Adding a manifest to a legacy app (from an administrators point of view)

    Hello Thorsten,

    An Application Manifest will identify an application to Windows Vista and
    allow administrators to define the application's desired security
    credentials-an important step in the deployment process that helps
    facilitate a better user experience. The manifest informs Windows Vista
    when an application is User Account Control-compliant and when to prompt
    users for administrator authorization to elevate privileges. To ensure
    integrity and functionality, these manifests can and should be signed.
    http://technet.microsoft.com/en-us/windowsvista/aa906021.aspx

    In Windows Vista, the application manifest, an XML file that describes and
    identifies the shared and private side-by-side assemblies that an
    application should bind to at run time, now includes entries for UAC
    application compatibility purposes. Administrative applications that
    include an entry in the application manifest will prompt the user for
    permission to access the user's access token. Most pre-Windows Vista
    administrative applications, however, can run smoothly without modification
    even though they lack an entry in the application manifest by using
    application compatibility fixes. Application compatibility fixes are
    database entries that enable applications that are not UAC compliant to
    work properly with Windows Vista.

    Thanks & Regards,

    Ken Zhao

    Microsoft Online Support
    Microsoft Global Technical Support Center

    Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.





    --------------------
    | Date: Mon, 03 Sep 2007 14:38:36 +0200
    | From: Thorsten Butz <>
    | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
    | MIME-Version: 1.0
    | Subject: Re: Adding a manifest to a legacy app (from an administrators
    point
    | of view)
    | References: <>
    <>
    | In-Reply-To: <>
    | Content-Type: text/plain; charset=ISO-8859-1
    | Content-Transfer-Encoding: 7bit
    | Message-ID: <>
    | Newsgroups:
    microsoft.public.windows.vista.administration_accounts_passwords
    | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net 84.62.174.127
    | Lines: 1
    | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.vista.administration_accounts_passwords:5261
    | X-Tomcat-NG:
    microsoft.public.windows.vista.administration_accounts_passwords
    |
    | Thanks for the reply, but:
    | my question relates to binary applications for which I do NOT own the
    | source. Is it possible to create a manifest for any existing application?
    |
    | Regards,
    | Thorsten
    |
     
    Ken Zhao [MSFT], Sep 6, 2007
    #4
  5. Re: Adding a manifest to a legacy app (from an administrators point of view)

    Hi Thorsten,

    If you have any updates or need any further assistance on this issue,
    please feel free to let me know.

    Thanks & Regards,

    Ken Zhao

    Microsoft Online Support
    Microsoft Global Technical Support Center

    Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.





    --------------------
    | X-Tomcat-ID: 59857209
    | References: <>
    <>
    <>
    | MIME-Version: 1.0
    | Content-Type: text/plain
    | Content-Transfer-Encoding: 7bit
    | From: ("Ken Zhao [MSFT]")
    | Organization: Microsoft
    | Date: Thu, 06 Sep 2007 04:50:02 GMT
    | Subject: Re: Adding a manifest to a legacy app (from an administrators
    point of view)
    | X-Tomcat-NG:
    microsoft.public.windows.vista.administration_accounts_passwords
    | Message-ID: <>
    | Newsgroups:
    microsoft.public.windows.vista.administration_accounts_passwords
    | Lines: 78
    | Path: TK2MSFTNGHUB02.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.vista.administration_accounts_passwords:5277
    | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
    |
    | Hello Thorsten,
    |
    | An Application Manifest will identify an application to Windows Vista and
    | allow administrators to define the application's desired security
    | credentials-an important step in the deployment process that helps
    | facilitate a better user experience. The manifest informs Windows Vista
    | when an application is User Account Control-compliant and when to prompt
    | users for administrator authorization to elevate privileges. To ensure
    | integrity and functionality, these manifests can and should be signed.
    | http://technet.microsoft.com/en-us/windowsvista/aa906021.aspx
    |
    | In Windows Vista, the application manifest, an XML file that describes
    and
    | identifies the shared and private side-by-side assemblies that an
    | application should bind to at run time, now includes entries for UAC
    | application compatibility purposes. Administrative applications that
    | include an entry in the application manifest will prompt the user for
    | permission to access the user's access token. Most pre-Windows Vista
    | administrative applications, however, can run smoothly without
    modification
    | even though they lack an entry in the application manifest by using
    | application compatibility fixes. Application compatibility fixes are
    | database entries that enable applications that are not UAC compliant to
    | work properly with Windows Vista.
    |
    | Thanks & Regards,
    |
    | Ken Zhao
    |
    | Microsoft Online Support
    | Microsoft Global Technical Support Center
    |
    | Get Secure! - www.microsoft.com/security
    <http://www.microsoft.com/security>
    | ====================================================
    | When responding to posts, please "Reply to Group" via your newsreader so
    | that others may learn and benefit from your issue.
    | ====================================================
    | This posting is provided "AS IS" with no warranties, and confers no
    rights.
    |
    |
    |
    |
    |
    | --------------------
    | | Date: Mon, 03 Sep 2007 14:38:36 +0200
    | | From: Thorsten Butz <>
    | | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
    | | MIME-Version: 1.0
    | | Subject: Re: Adding a manifest to a legacy app (from an administrators
    | point
    | | of view)
    | | References: <>
    | <>
    | | In-Reply-To: <>
    | | Content-Type: text/plain; charset=ISO-8859-1
    | | Content-Transfer-Encoding: 7bit
    | | Message-ID: <>
    | | Newsgroups:
    | microsoft.public.windows.vista.administration_accounts_passwords
    | | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net 84.62.174.127
    | | Lines: 1
    | | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
    | | Xref: TK2MSFTNGHUB02.phx.gbl
    | microsoft.public.windows.vista.administration_accounts_passwords:5261
    | | X-Tomcat-NG:
    | microsoft.public.windows.vista.administration_accounts_passwords
    | |
    | | Thanks for the reply, but:
    | | my question relates to binary applications for which I do NOT own the
    | | source. Is it possible to create a manifest for any existing
    application?
    | |
    | | Regards,
    | | Thorsten
    | |
    |
    |
     
    Ken Zhao [MSFT], Sep 11, 2007
    #5
  6. Thorsten Butz

    koschins Guest

    Re: Adding a manifest to a legacy app (from an administrators poin

    Hello,

    I am having the same problem but this answer seems to be only marketing text
    to me.

    What are the technical details/steps that need to be done e.g. to mark an
    existing .NET executable as "requireAdministrativePermissions" in VISTA. So
    far I have come across creating manifest files and using mt.exe to sign the
    ..net executable. But there seem to be many pitfalls to this (mt.exe Vista SDK
    version required due to MS Bug http://support.microsoft.com/kb/925378/en-us).
    A complete overview would be helpful (e.g. Is it sufficient to just create
    the manifest file or is mt.exe required in VISTA ?)

    Greetings,
    koschins

    ""Ken Zhao [MSFT]"" wrote:

    > Hello Thorsten,
    >
    > An Application Manifest will identify an application to Windows Vista and
    > allow administrators to define the application's desired security
    > credentials-an important step in the deployment process that helps
    > facilitate a better user experience. The manifest informs Windows Vista
    > when an application is User Account Control-compliant and when to prompt
    > users for administrator authorization to elevate privileges. To ensure
    > integrity and functionality, these manifests can and should be signed.
    > http://technet.microsoft.com/en-us/windowsvista/aa906021.aspx
    >
    > In Windows Vista, the application manifest, an XML file that describes and
    > identifies the shared and private side-by-side assemblies that an
    > application should bind to at run time, now includes entries for UAC
    > application compatibility purposes. Administrative applications that
    > include an entry in the application manifest will prompt the user for
    > permission to access the user's access token. Most pre-Windows Vista
    > administrative applications, however, can run smoothly without modification
    > even though they lack an entry in the application manifest by using
    > application compatibility fixes. Application compatibility fixes are
    > database entries that enable applications that are not UAC compliant to
    > work properly with Windows Vista.
    >
    > Thanks & Regards,
    >
    > Ken Zhao
    >
    > Microsoft Online Support
    > Microsoft Global Technical Support Center
    >
    > Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
    > ====================================================
    > When responding to posts, please "Reply to Group" via your newsreader so
    > that others may learn and benefit from your issue.
    > ====================================================
    > This posting is provided "AS IS" with no warranties, and confers no rights.
    >
    >
    >
    >
    >
    > --------------------
    > | Date: Mon, 03 Sep 2007 14:38:36 +0200
    > | From: Thorsten Butz <>
    > | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
    > | MIME-Version: 1.0
    > | Subject: Re: Adding a manifest to a legacy app (from an administrators
    > point
    > | of view)
    > | References: <>
    > <>
    > | In-Reply-To: <>
    > | Content-Type: text/plain; charset=ISO-8859-1
    > | Content-Transfer-Encoding: 7bit
    > | Message-ID: <>
    > | Newsgroups:
    > microsoft.public.windows.vista.administration_accounts_passwords
    > | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net 84.62.174.127
    > | Lines: 1
    > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
    > | Xref: TK2MSFTNGHUB02.phx.gbl
    > microsoft.public.windows.vista.administration_accounts_passwords:5261
    > | X-Tomcat-NG:
    > microsoft.public.windows.vista.administration_accounts_passwords
    > |
    > | Thanks for the reply, but:
    > | my question relates to binary applications for which I do NOT own the
    > | source. Is it possible to create a manifest for any existing application?
    > |
    > | Regards,
    > | Thorsten
    > |
    >
    >
     
    koschins, Oct 17, 2007
    #6
  7. Re: Adding a manifest to a legacy app (from an administrators poin

    Koschins

    You might get more focused information on the free MSDN developer forums.
    You can dialog there with other developers and Microsoft employees who may
    have the answers you are looking for.

    MSDN Forums: Vista Software Development.
    http://forums.microsoft.com/MSDN/default.aspx?ForumGroupID=24&SiteID=1


    --

    Ronnie Vernon
    Microsoft MVP
    Windows Shell/User


    "koschins" <> wrote in message
    news:...
    > Hello,
    >
    > I am having the same problem but this answer seems to be only marketing
    > text
    > to me.
    >
    > What are the technical details/steps that need to be done e.g. to mark an
    > existing .NET executable as "requireAdministrativePermissions" in VISTA.
    > So
    > far I have come across creating manifest files and using mt.exe to sign
    > the
    > .net executable. But there seem to be many pitfalls to this (mt.exe Vista
    > SDK
    > version required due to MS Bug
    > http://support.microsoft.com/kb/925378/en-us).
    > A complete overview would be helpful (e.g. Is it sufficient to just create
    > the manifest file or is mt.exe required in VISTA ?)
    >
    > Greetings,
    > koschins
    >
    > ""Ken Zhao [MSFT]"" wrote:
    >
    >> Hello Thorsten,
    >>
    >> An Application Manifest will identify an application to Windows Vista and
    >> allow administrators to define the application's desired security
    >> credentials-an important step in the deployment process that helps
    >> facilitate a better user experience. The manifest informs Windows Vista
    >> when an application is User Account Control-compliant and when to prompt
    >> users for administrator authorization to elevate privileges. To ensure
    >> integrity and functionality, these manifests can and should be signed.
    >> http://technet.microsoft.com/en-us/windowsvista/aa906021.aspx
    >>
    >> In Windows Vista, the application manifest, an XML file that describes
    >> and
    >> identifies the shared and private side-by-side assemblies that an
    >> application should bind to at run time, now includes entries for UAC
    >> application compatibility purposes. Administrative applications that
    >> include an entry in the application manifest will prompt the user for
    >> permission to access the user's access token. Most pre-Windows Vista
    >> administrative applications, however, can run smoothly without
    >> modification
    >> even though they lack an entry in the application manifest by using
    >> application compatibility fixes. Application compatibility fixes are
    >> database entries that enable applications that are not UAC compliant to
    >> work properly with Windows Vista.
    >>
    >> Thanks & Regards,
    >>
    >> Ken Zhao
    >>
    >> Microsoft Online Support
    >> Microsoft Global Technical Support Center
    >>
    >> Get Secure! - www.microsoft.com/security
    >> <http://www.microsoft.com/security>
    >> ====================================================
    >> When responding to posts, please "Reply to Group" via your newsreader so
    >> that others may learn and benefit from your issue.
    >> ====================================================
    >> This posting is provided "AS IS" with no warranties, and confers no
    >> rights.
    >>
    >>
    >>
    >>
    >>
    >> --------------------
    >> | Date: Mon, 03 Sep 2007 14:38:36 +0200
    >> | From: Thorsten Butz <>
    >> | User-Agent: Thunderbird 1.5.0.2 (Windows/20060308)
    >> | MIME-Version: 1.0
    >> | Subject: Re: Adding a manifest to a legacy app (from an administrators
    >> point
    >> | of view)
    >> | References: <>
    >> <>
    >> | In-Reply-To: <>
    >> | Content-Type: text/plain; charset=ISO-8859-1
    >> | Content-Transfer-Encoding: 7bit
    >> | Message-ID: <>
    >> | Newsgroups:
    >> microsoft.public.windows.vista.administration_accounts_passwords
    >> | NNTP-Posting-Host: dslb-084-062-174-127.pools.arcor-ip.net
    >> 84.62.174.127
    >> | Lines: 1
    >> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
    >> | Xref: TK2MSFTNGHUB02.phx.gbl
    >> microsoft.public.windows.vista.administration_accounts_passwords:5261
    >> | X-Tomcat-NG:
    >> microsoft.public.windows.vista.administration_accounts_passwords
    >> |
    >> | Thanks for the reply, but:
    >> | my question relates to binary applications for which I do NOT own the
    >> | source. Is it possible to create a manifest for any existing
    >> application?
    >> |
    >> | Regards,
    >> | Thorsten
    >> |
    >>
    >>
     
    Ronnie Vernon MVP, Oct 18, 2007
    #7
  8. Thorsten Butz

    kl4u5

    Joined:
    Oct 29, 2010
    Messages:
    1
    Likes Received:
    0
    Use mt.exe from windows SDK
    see this url:
    klaus-b-jensen.blogspot.com/2010/10/how-to-add-manifest-to-legacy.html
     
    kl4u5, Oct 29, 2010
    #8
    1. Advertisements

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
  1. slimCODE
    Replies:
    0
    Views:
    740
    slimCODE
    Nov 14, 2007
  2. ms curly

    .EXE.manifest

    ms curly, Nov 4, 2007, in forum: Windows Vista Installation
    Replies:
    3
    Views:
    637
    dzomlija
    Nov 5, 2007
  3. togo

    Vista-Manifest required?

    togo, Feb 16, 2007, in forum: Windows Vista Security
    Replies:
    0
    Views:
    216
  4. will f

    UAC Manifest for VB6 Apps

    will f, Feb 23, 2007, in forum: Windows Vista Security
    Replies:
    1
    Views:
    479
    Phil Wilson
    Feb 24, 2007
  5. G. Plante

    Manifest not working

    G. Plante, Feb 24, 2007, in forum: Windows Vista Security
    Replies:
    3
    Views:
    384
    Jesper
    Feb 26, 2007
  6. David

    Manifest file - 3rd party app

    David, Aug 11, 2004, in forum: Windows Server
    Replies:
    0
    Views:
    394
    David
    Aug 11, 2004
  7. Magnetoram

    Senior Administrators and Junior Administrators

    Magnetoram, Jun 17, 2009, in forum: Windows Small Business Server
    Replies:
    4
    Views:
    747
    Lanwench [MVP - Exchange]
    Jun 18, 2009
  8. Mike P.
    Replies:
    2
    Views:
    422
    Guest
    Jul 11, 2004
Loading...