Windows 7 - RequestExecutionLevel ?

kando234 · 24th April 2009, 08:30

Hi,

another small problem I experienced...
I really donÂ´t get this and maybe someone
out here has an idea whatÂ´s going on.

My old installation routine - i call it (1) from now on - (guess it was built with NSIS version < 2) works fine on windows 7...

But my new installation routine - (2) - (same source,
just added a few sections) doesnÂ´t.

HereÂ´s what happens on Windows 7:

(1) UAC Warning,
looks like this
(if url does not appear: img27.imageshack.us/img27/3365/unbenanntmtp.png

-> I click allow -> everything works as expected

(2): Security warning due to unknown publisher
(we know that from Vista and XP) - looks like this (i googled an image, if url does not appear: tweak-uac.com/UAC-unknown-publisher.png)

-> I click "Run" -> Installer works fine but isnÂ´t allowed to create folders or shortcuts

P.S.:
RequestExecutionLevel for both installers is set to:

RequestExecutionLevel user

Thanks for any hint you can provide on why those installation routines work different (I want it the way the old installation routine worked ... without changing user -> admin, or is it impossible without changing it to admin ?)

Animaether · 24th April 2009, 15:23

where are you trying to create the folders/shortcuts? They may be off-limits to writing except for admins (short of an admin messing with permissions).

kando234 · 24th April 2009, 17:44

Folders in
C:\Program Files\[blabla]

and

shortcuts in startmenu and desktop.

The old installer works fine with RequestLevel user !
But the new one doesnÂ´t ... It cannot create folders
or shortcuts in Vista or Windows 7.

Is there something the new version of NSIS changed ?

Animaether · 24th April 2009, 17:53

yes, but did your old installer actually try to write to c:\program files\[blabla]?

If not - there's your problem

Any installer that wants to write files to the Program Files folder, write to the HKLM registry and several more bits and pieces require administrator rights.

kando234 · 24th April 2009, 18:46

Of course I tried the same folders in "Program Files" but as you can see both installers request different authorization.... very strange.

Anders · 25th April 2009, 11:15

there was no RequestExecutionLevel in <v2, so what you are saying does not make any sense.

Comperio · 25th April 2009, 16:57

I'll add a few more things:

RequestExecutionLevel was added with 2.21. So even the very first releases of 2.x did not have it.

And are SURE that you have RequestExecutionLevel properly set?

I know Windows Vista has the ability to try to auto-detect if an EXE is an installation or not based on file names, embedded vendor info, and other "signatures". So it's possible you'd get the UAC prompt in some cases in which there was no application manifest.

I did some searching and found this tool that may help you 'peek inside' your EXE to show you any embedded application manifest to allow you to see if it actually has the proper executionlevel set: (http://weblogs.asp.net/kennykerr/arc...-view-1-0.aspx)

I haven't tried it, but I thought I'd mentioned it as a way for you to double-check each of your EXEs to see if they actually have the manifest set properly. (There is another tool in one of the MS SDKs that I've used before that does a similar thing, but unfortunately, I don't remember the name of it off hand...)

24th April 2009, 08:30	#1
kando234 Junior Member Join Date: Jan 2009 Posts: 7	Windows 7 - RequestExecutionLevel ? Hi, another small problem I experienced... I really donÂ´t get this and maybe someone out here has an idea whatÂ´s going on. My old installation routine - i call it (1) from now on - (guess it was built with NSIS version < 2) works fine on windows 7... But my new installation routine - (2) - (same source, just added a few sections) doesnÂ´t. HereÂ´s what happens on Windows 7: (1) UAC Warning, looks like this (if url does not appear: img27.imageshack.us/img27/3365/unbenanntmtp.png -> I click allow -> everything works as expected (2): Security warning due to unknown publisher (we know that from Vista and XP) - looks like this (i googled an image, if url does not appear: tweak-uac.com/UAC-unknown-publisher.png) -> I click "Run" -> Installer works fine but isnÂ´t allowed to create folders or shortcuts P.S.: RequestExecutionLevel for both installers is set to: RequestExecutionLevel user Thanks for any hint you can provide on why those installation routines work different (I want it the way the old installation routine worked ... without changing user -> admin, or is it impossible without changing it to admin ?)

25th April 2009, 11:15	#6
Anders Moderator Join Date: Jun 2002 Location: ${NSISDIR} Posts: 5,442	there was no RequestExecutionLevel in <v2, so what you are saying does not make any sense. IntOp $PostCount $PostCount + 1

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

24th April 2009, 15:23	#2
Animaether Major Dude Join Date: Jun 2001 Posts: 1,173	where are you trying to create the folders/shortcuts? They may be off-limits to writing except for admins (short of an admin messing with permissions).

24th April 2009, 17:44	#3
kando234 Junior Member Join Date: Jan 2009 Posts: 7	Folders in C:\Program Files\[blabla] and shortcuts in startmenu and desktop. The old installer works fine with RequestLevel user ! But the new one doesnÂ´t ... It cannot create folders or shortcuts in Vista or Windows 7. Is there something the new version of NSIS changed ?

24th April 2009, 17:53	#4
Animaether Major Dude Join Date: Jun 2001 Posts: 1,173	yes, but did your old installer actually try to write to c:\program files\[blabla]? If not - there's your problem Any installer that wants to write files to the Program Files folder, write to the HKLM registry and several more bits and pieces require administrator rights.

24th April 2009, 18:46	#5
kando234 Junior Member Join Date: Jan 2009 Posts: 7	Of course I tried the same folders in "Program Files" but as you can see both installers request different authorization.... very strange.

25th April 2009, 16:57	#7
Comperio Major Dude Join Date: Jan 2005 Location: Oregon Coast Posts: 737	I'll add a few more things: RequestExecutionLevel was added with 2.21. So even the very first releases of 2.x did not have it. And are SURE that you have RequestExecutionLevel properly set? I know Windows Vista has the ability to try to auto-detect if an EXE is an installation or not based on file names, embedded vendor info, and other "signatures". So it's possible you'd get the UAC prompt in some cases in which there was no application manifest. I did some searching and found this tool that may help you 'peek inside' your EXE to show you any embedded application manifest to allow you to see if it actually has the proper executionlevel set: (http://weblogs.asp.net/kennykerr/arc...-view-1-0.aspx) I haven't tried it, but I thought I'd mentioned it as a way for you to double-check each of your EXEs to see if they actually have the manifest set properly. (There is another tool in one of the MS SDKs that I've used before that does a similar thing, but unfortunately, I don't remember the name of it off hand...)