In Vista do not run your application from installer

I’m working on a new version of Direct Access which, among other new features, will add full support for Windows Vista. Thanks to the help of my good friend Marcus Tettmar, I found that the reason why in some cases drag and drop from Explorer to Direct Access didn’t work was due to the privileges Direct Access was running with. The behaviour happened only when launching Direct Access directly from the setup application.
The “Run the program now” checkbox that appears in many setup installations present a security risk with Vista: as all the processes that setup spawn inherit the same privileges as Setup (normally full administrative privileges) your application will be run with full administrative privileges as well.
This will not only create a security problem but may also cause other interaction problems between applications (for example, drag & drop from explorer to Direct Access doesn’t work).
The suggestion, therefore, is to remove the “Run the program now” from the installation final screen, as it’s suggested in the Innosetup FAQ at http://www.jrsoftware.org/iskb.php?vista
Technorati Tags: Vista, Installation
1 Comment so far
Leave a reply






Here is how to solve this problem (look for the RunAsStdUser() function in the source code):
http://www.tweak-uac.com/riding-vista-elevator/