Forced the application to have the administrator privileges

Question

I need to give my application administrator rights, knowing that it will be run from a user session and not admin account.

I've looked on other sites, but can't find anything that helps.

I tried editing the manifest among other things and there have inserted the line:

<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />

This gave me an error when trying to publish using ClickOnce, but not when I debug.

Can you help me?

Deland

Answer 1

first of all - indeed, it's not allowed by design, to install and ClickOnce app as admin: http://msdn.microsoft.com/en-us/library/142dbbz4(v=vs.90).aspx

take a look at this post: http://antscode.blogspot.ca/2011/02/running-clickonce-application-as.html - it explains how to run ClickOnce app as admin. BUT - it have to say that I have walked this path - and I did not have much luck with it. I had numerous troubles with this approach (trying to run ClickOnce app with admin privileges). As far as I recall, the biggest problem was auto-update was not working properly. Not to mention that non-admin users might need to enter admin credentials all the time.

So my advise would be to rethink your logic, and encapsulate the piece you need to be done as admin in a separate EXE file - and make it very clear for a user that when he clicks THAT button, UAC prompt will show up (probably by addin "shield" icon to the button). And in that button_click event do something like this:

// 2. Run Photoshop action on this image (and wait for the task to complete)
if (string.IsNullOrWhiteSpace(this.PhotoshopEnhanceActionAbsPath) == false)
{
    var pi = new ProcessStartInfo(this.PhotoshopEnhanceActionAbsPath,  "\"" + imgPhotoshopActionAbsPath + "\"");
    pi.UseShellExecute = true;
    pi.Verb = "runas";
    var photoshopAction = Process.Start(pi);
    var success = photoshopAction.WaitForExit();
    if (success == false)
    {
        // do something here
    }                
}

this approach worked very well for me. The key here is this:

pi.UseShellExecute = true;
pi.Verb = "runas";

it runs your EXE with admin right - so UAC prompt will be displayed at that moment. Another nice consequence here is that users might not run this particular piece of logic each time they are using the app - and therefore they won't be annoyed by the prompt when they do not need it.

Clichy

@Matth Sorry, I'm not clear on your question. The goal is to run SOME code in elevated mode. Unless you are an admin, you need that prompt to elevate your app. – Clichy

The engineers who will use this application is a user account on the computer. the application performs the prvilèges process that requires an administrator. Outside there is impenssable for safety reasons that their admin account is provided. I just want to be transparent about the user. and the same principle I have already managed to invoker process without UAC thanks to commands p.StartInfo.UserName = "user" p.StartInfo.Password = "secret" but the only worry is that my command prompt is displayed. While I like that it runs in Background. – Deland

did you try ProcessStartInfo.WindowStyle msdn.microsoft.com/en-us/library/… – Clichy

Yes i try : Process clone = new Process(); System.Security.SecureString secret = new system.Security.SecureString(); foreach (char c in pwd) secret.AppendChar(c); clone.StartInfo.UserName = user; clone.StartInfo.Password = secret; clone.StartInfo.FileName = "dsfo.exe"; clone.StartInfo.Arguments = lblAdress.Text + @" 0 0 " + tmp + "ADC.img"; clone.StartInfo.UseShellExecute = false; clone.StartInfo.CreateNoWindow = true; clone.StartInfo.WindowStyle = ProcessWindowStyle.Hidden; clone.Start(); – Deland

let us continue this discussion in chat – Clichy

@Deland - were you able to solve the problem? Is all good now? – Clichy

Answer 2

I'm pretty sure that this behaviour is by design.

ClickOnce apps are designed to be installable without Administrator privileges. It's not possible to elevate them at runtime as this means that effectively a user with no admin rights could install then run the app as admin; this would be a security risk.

Drugge