Small Business technological experience at Nagarsoft

In Vista do not run your application from installer

Runapplication

I’m working on a new version of Direct Access which, among other new features, will add full support for Windows Vista. Thanks to the help of my good friend Marcus Tettmar, I found that the reason why in some cases drag and drop from Explorer to Direct Access didn’t work was due to the privileges Direct Access was running with. The behaviour happened only when launching Direct Access directly from the setup application.

The “Run the program now” checkbox that appears in many setup installations present a security risk with Vista: as all the processes that setup spawn inherit the same privileges as Setup (normally full administrative privileges) your application will be run with full administrative privileges as well.

This will not only create a security problem but may also cause other interaction problems between applications (for example, drag & drop from explorer to Direct Access doesn’t work).

The suggestion, therefore, is to remove the “Run the program now” from the installation final screen, as it’s suggested in the Innosetup FAQ at http://www.jrsoftware.org/iskb.php?vista

Technorati Tags: ,

People even with a basic know how about computers can tell how large a business opportunity is in seo services, particularly for people from hosting background, who already have access to a dedicated server.
del.icio.us:In Vista do not run your application from installer digg:In Vista do not run your application from installer reddit:In Vista do not run your application from installer gifttagging:In Vista do not run your application from installer

1 comment

1 Comment so far

  1. Andrei Belogortseff UNITED STATES December 20th, 2006 08:43

    Here is how to solve this problem (look for the RunAsStdUser() function in the source code):

    http://www.tweak-uac.com/riding-vista-elevator/

Leave a reply