UAC Inconsistencies Among Vista Machines?

Discussion in 'Windows Vista Administration' started by Baboon, Sep 14, 2007.

  1. Baboon

    Baboon Guest

    Hi -

    I have to distribute a batch file to many Vista and XP users in our
    organization, which will dump a 16 bit app onto the local hard drive and
    create shortcuts to it on the Desktop and Start Menu. I would prefer that
    the program folder be copied to Program Files and that a shortcut be copied
    to the %AllUsersProfile% Desktop and Start Menu. All of the users will be
    installing it on their personally owned laptops so they almost certainly will
    have Admin rights.

    The problem is that when I tried this on a couple of computers using an
    account with Admin rights, it worked like a charm. But when I tried it on a
    third, I found that it prompted for elevation. (All of these machines have
    UAC turned on.) I don't think there is a way to elevate within a batch file,
    so I tried right clicking the batch file and choosing "Run as Administrator".
    Then because it was running under a different account, I lost my working
    directory and the batch file was not able to find the files it needed to
    copy. (I can't use an absolute path to the source files in the batch file,
    since I can't assume the directory that users will be running this from.) I
    ended up changing the batch file so that everything was copied to the user's
    own profile, since I don't know how many other Vista machines will have this
    same problem.

    Can someone explain why I would be prompted to elevate when trying to copy
    these files on some machine but not others? I'm not sure what I'm missing.

    Thanks.
     
    Baboon, Sep 14, 2007
    #1
    1. Advertisements

  2. Baboon

    Baboon Guest

    It may be obvious, but I don't think I made it clear that all of these
    problem machines are running Vista. The XP ones worked fine, though I had to
    use a different batch file altogether.
     
    Baboon, Sep 14, 2007
    #2
    1. Advertisements

  3. Baboon

    Michael Guest

    In Vista, c:\Program Files is a protected system area. Directly writing
    files here is going to give some results that you might not find to your
    liking. Note that this directory is owned by 'Trusted Installer'. Generally
    I have found that you can create subdirectories and store files, but you
    cannot 'change' them as expected. instead 'shadow' copies of the changes are
    saved and used in individual user areas.

    Michael
     
    Michael, Sep 14, 2007
    #3
  4. Hello,

    Thank you for using newsgroup!

    From your post, I'd like to thanks for Michael's explanation.

    Thanks & Regards,

    Ken Zhao

    Microsoft Online Support
    Microsoft Global Technical Support Center

    Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.





    --------------------
    | From: "Michael" <>
    | References: <>
    <>
    | In-Reply-To: <>
    | Subject: Re: UAC Inconsistencies Among Vista Machines?
    | Date: Fri, 14 Sep 2007 00:28:52 -0400
    | Lines: 61
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | format=flowed;
    | charset="Utf-8";
    | reply-type=original
    | Content-Transfer-Encoding: 7bit
    | X-Priority: 3
    | X-MSMail-Priority: Normal
    | X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16480
    | X-MS-CommunityGroup-PostID: {E08364E9-0C95-4C39-A47D-B94208BCE16E}
    | X-MS-CommunityGroup-ThreadID: 3BD003E9-3C01-42FD-A261-505E7699006A
    | X-MS-CommunityGroup-ParentID: 4AAFB845-5536-4F87-AA4A-FD357679C8E6
    | Newsgroups:
    microsoft.public.windows.vista.administration_accounts_passwords
    | Path: TK2MSFTNGHUB02.phx.gbl
    | Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.vista.administration_accounts_passwords:5399
    | NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
    | X-Tomcat-NG:
    microsoft.public.windows.vista.administration_accounts_passwords
    |
    | In Vista, c:\Program Files is a protected system area. Directly writing
    | files here is going to give some results that you might not find to your
    | liking. Note that this directory is owned by 'Trusted Installer'.
    Generally
    | I have found that you can create subdirectories and store files, but you
    | cannot 'change' them as expected. instead 'shadow' copies of the changes
    are
    | saved and used in individual user areas.
    |
    | Michael
    |
    |
    | | > It may be obvious, but I don't think I made it clear that all of these
    | > problem machines are running Vista. The XP ones worked fine, though I
    had
    | > to
    | > use a different batch file altogether.
    | >
    | > "Baboon" wrote:
    | >
    | >> Hi -
    | >>
    | >> I have to distribute a batch file to many Vista and XP users in our
    | >> organization, which will dump a 16 bit app onto the local hard drive
    and
    | >> create shortcuts to it on the Desktop and Start Menu. I would prefer
    | >> that
    | >> the program folder be copied to Program Files and that a shortcut be
    | >> copied
    | >> to the %AllUsersProfile% Desktop and Start Menu. All of the users
    will
    | >> be
    | >> installing it on their personally owned laptops so they almost
    certainly
    | >> will
    | >> have Admin rights.
    | >>
    | >> The problem is that when I tried this on a couple of computers using an
    | >> account with Admin rights, it worked like a charm. But when I tried
    it
    | >> on a
    | >> third, I found that it prompted for elevation. (All of these machines
    | >> have
    | >> UAC turned on.) I don't think there is a way to elevate within a
    batch
    | >> file,
    | >> so I tried right clicking the batch file and choosing "Run as
    | >> Administrator".
    | >> Then because it was running under a different account, I lost my
    working
    | >> directory and the batch file was not able to find the files it needed
    to
    | >> copy. (I can't use an absolute path to the source files in the batch
    | >> file,
    | >> since I can't assume the directory that users will be running this
    from.)
    | >> I
    | >> ended up changing the batch file so that everything was copied to the
    | >> user's
    | >> own profile, since I don't know how many other Vista machines will
    have
    | >> this
    | >> same problem.
    | >>
    | >> Can someone explain why I would be prompted to elevate when trying to
    | >> copy
    | >> these files on some machine but not others? I'm not sure what I'm
    | >> missing.
    | >>
    | >> Thanks.
    |
    |
     
    Ken Zhao [MSFT], Sep 14, 2007
    #4
  5. Baboon

    Baboon Guest

    Thanks for the response.

    You said:
    "you can create subdirectories and store files, but you
    cannot 'change' them as expected"
    The batch file was only trying to create a subdirectory in Program Files.

    It also was't able to create shortcuts in %AllUsersProfile%.

    If I tried to do either of these things manually under the same admin
    account that was running the batch file, I succeeded, but I was asked to
    elevate on the problem machines only.

    I can't understand that given several machines that all had UAC enabled,
    some had this behavior and others worked just fine. Group Policy is not a
    factor, for one thing.

    Regards.
     
    Baboon, Sep 14, 2007
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.