Suppress UAC

13 posts

june1212October 7, 2009 at 2:27 PM#

Suppress UAC

How to suppress UAC in Vista? I need my installer.exe run totally automatically.But if the UAC is on on Vista, it need user elevates.

MSGOctober 7, 2009 at 2:34 PM#

requestexecutionlevel user

http://nsis.sourceforge.net/Docs/Chapter4.html#4.8.1.32

(Of course, this will not grant you administrative access. But that is the whole point of the administrator password.)

june1212October 7, 2009 at 5:29 PM#

thanks. Does that mean I must login as a user instead of admin to run the installer?

MSGOctober 7, 2009 at 5:35 PM#

No. It just means that any user running the installer will NOT get the UAC elevation prompt on Win Vista and higher. (Remember, Windows UAC pops up even for Administrator users when they run an admin-only application.)

AndersOctober 7, 2009 at 5:37 PM#

admins are members of the user group (normally)

It just means you can't write to programfiles/windir/HKLM etc

june1212October 7, 2009 at 5:41 PM#

I tried the user, still have the "Allow/Cancel" prompt. Is that because I have some statements in the script to write to HKLM, and copy files to ProgramFiles?

AndersOctober 7, 2009 at 5:51 PM#

did you put "requestexecutionlevel user" in your script?

june1212October 7, 2009 at 6:00 PM#

yes, i do

RequestExecutionLevel user /* RequestExecutionLevel REQUIRED! for UAC Plugin*/
InstallDirRegKey HKLM "${PRODUCT_DIR_REGKEY}" ""

There are other registry writing lines in -Post

Then I log into my Vista as an account in Admin group, and run this installer.exe from %Public%. Still have the "Allow/Cancel" prompt.

june1212October 7, 2009 at 6:02 PM#

But I also have your UAC plugin in the .onInit
UAC::RunElevated

Is that causing the prompt?

AndersOctober 7, 2009 at 6:03 PM#

um, yes, what do you think RunElevated means?

june1212October 7, 2009 at 6:10 PM#

Originally posted by Anders
um, yes, what do you think RunElevated means?

Hehe, that is added by a NSIS expert guy from my company:-)

By the way, if I set it run as user, what will be the diff as admin? THis installer copies files to ProgramFiles, add registry for the product, and install a windows service. Can User priviledge aproach that?

Thanks

june1212October 7, 2009 at 6:24 PM#

I take out the UAC plugin. But installing windows service has "Access is denied" error. Does that mean, I must use admin in the "RequestExecutionLevel"?

MSGOctober 8, 2009 at 4:50 AM#

Yes. Unless you are using the NSIS UAC plugin, which is a special case. In that case, you need to use requestexecutionlevel user.

The point is: If you want your installer to do something that only admins are allowed to do, naturally the installer will need admin access.