none
Application prompt after applying UAC settings RRS feed

  • Question

  • Greetings,

      We applied some UAC settings via Group Policy to all Windows 7 machines. Now some old applications are throwing up a prompt and the users normal credentials wont run the app. The point is that the app DID NOT require admin privileges before we applied the settings. The users were able to launch the app without prompts and run it successfully.

      Does anyone know which security or UAC setting may be causing this? Remember that the apps ran perfectly well before these settings were applied  without an administrative account.

    Thanks

    David Z

    Friday, July 31, 2015 4:37 AM

All replies

  • I think the reason could be a security level.

    Hare are User Account Control in Windows 7 Best Practices:

    https://technet.microsoft.com/en-us/library/ee679793%28WS.10%29.aspx?f=255&MSPPError=-2147217396

    Friday, July 31, 2015 5:31 AM
  • My question is which setting(s)?

    In an attempt to isolate this, I rolled back all of the UAC settings in the security options to the default.

    I configured the defaults, not "not configured" to make sure there was no tattooing.

    I restarted the machine not once but twice.

    I checked rsop to make sure the settings were back at the default.

    The prompt still occurred.

    So my question becomes "which non-UAC setting(s) would cause a UAC prompt for these applications where there was never one before?".

    Thanks

    David Z

    Friday, July 31, 2015 7:30 AM
  • did you also maintain the sever? app locker can do this setting

    this issue maybe also related to user service profile service issue

    http://www.sevenforums.com/tutorials/186131-user-profile-service-failed-logon-user-profile-cannot-loaded.html

    did this happen to all user? or only specific user?

    other step will be create new user account or reinstalling the apps to isolate software issue

    Monday, August 3, 2015 6:44 AM
  • What elevation level have you set in group policy? Check this link.

    https://technet.microsoft.com/en-us/library/Dd835564%28v=WS.10%29.aspx?f=255&MSPPError=-2147217396

    Try changing the ConsentPromptBehaviorUser level and ConsentPromptBehaviorAdmin.


    (Please click on "Vote as Helpful" and/or "Mark as Answer", if it has helped you. )

    Monday, August 3, 2015 7:04 AM
  • Hi,

    We rolled back all the UAC settings to the default. It is not a UAC setting.

    Cheers

    David Z

    Monday, August 3, 2015 9:13 PM
  • We are now targeting how the app was installed. There could be a clue there...
    Monday, August 3, 2015 9:14 PM
  • Possible solution to suppress the UAC prompt.

    1. Right click the shortcut and run the application in administrator mode.

    2. Right click the shortcut and select properties-  compatibility tab and check Run this program in compatibility mode for Win XP.

    3. Try using RUNASINVOKER shim.

    4. Try giving permissions to the application programs folder where the shortcut refers to.


    (Please click on "Vote as Helpful" and/or "Mark as Answer", if it has helped you. )

    Tuesday, August 4, 2015 3:49 AM
  • Its the setting im after.

    Let me explain - The user could run the application without any prompts and without doing anything fancy - just launch the application. We then applied around 300 security settings and they got a UAC looking prompt when they launched the application. Rolling back just the UAC settings didnt remove the prompt. Rolling back the entire 300 security settings did fix it. It's like looking for a needle in a haystack!

    • Proposed as answer by Andy Nugraha Wednesday, August 5, 2015 2:17 AM
    • Unproposed as answer by David Zemdegs Wednesday, August 5, 2015 3:11 AM
    Tuesday, August 4, 2015 8:17 PM
  • Is it happening for all the applications or just a single application? can you use ProcessMonitor while launching the shortcut and check.

    (Please click on "Vote as Helpful" and/or "Mark as Answer", if it has helped you. )

    Wednesday, August 5, 2015 5:16 AM
  • Just a single application
    Wednesday, August 5, 2015 5:18 AM
  • ok. can you search in registry for that application name.

    whether any entry is present in HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers or HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers


    (Please click on "Vote as Helpful" and/or "Mark as Answer", if it has helped you. )

    Wednesday, August 5, 2015 6:06 AM
  • Hi David Zemdegs

    Is there any update for this issue

    By Using ProcMon we can identify how the applications installed

    https://technet.microsoft.com/en-us/library/dd835564(v=ws.10).aspx#BKMK_ElevateUIAccessApps

    Below GPO will disable UAC

    • User Account Control: Behavior of the elevation prompt for administrators - Elevate without prompting
    • User Account Control: Detect application installations and prompt for elevation – Disabled
    • User Account Control: Run all administrators in Admin Approval Mode – Disabled 

     

    Andy Nugraha

    TechNet Community Support

    • Proposed as answer by Andy Nugraha Monday, August 31, 2015 9:45 AM
    • Unproposed as answer by David Zemdegs Monday, August 31, 2015 11:43 AM
    • Proposed as answer by David das Neves Monday, August 31, 2015 11:46 AM
    • Unproposed as answer by David Zemdegs Monday, August 31, 2015 11:47 AM
    Wednesday, August 26, 2015 1:59 AM
  • Thanks - as I mentioned earlier in the thread we rolled back all the UAC settings and that didnt get rid of the prompt. We are still investigating the issue.
    Wednesday, August 26, 2015 3:28 AM
  • Thanks for the update David Zemdegs


    Andy Nugraha

    TechNet Community Support

    Wednesday, August 26, 2015 5:19 AM
  • I wish people would read. I clearly stated I disabled UAC settings in the GPO and this did NOT resolve the issue.
    Monday, August 31, 2015 11:44 AM