Program asks for permission every boot

[munchie]

I've got a program from a driver I installed (C:\windows\soundman.exe)
that pops up a dialog every time I boot this limited account asking
for permission to run. I've tried unchecking the permission settings,
and unblocking the program--by right clicking it.

Am I missing something here?

 

[steaminshrooms]

Re: Program asks for permission every boot


does the program have to be run as an administrator?
if so, there's pretty much no way to stop it from asking for permission
without turning off user account control. (uac is located in control
panel, under 'user accounts'). You really don't want to turn this off,
though, as it will compromise your security pretty significantly.
It sounds like you've already tried to un-check the 'run as
administrator' box in properties.
the program might be set to always run as an administrator. if it will
run properly with normal permissions, then you can reverse its
administrator status (provided it runs from a shortcut). if you
right-click the shortcut [from which it runs] and go to its properties,
there will be a 'shortcut' tab. click 'advanced' on the shortcut tab,
and un-check the check box telling it to run as admin. if the file runs
directly from an .exe, there will be no such tab.

it's likely you will just have to eat it though. vista generally
throws convenience to the wind, and emphasizes security.

munchie;464480 Wrote:
> I've got a program from a driver I installed (C:\windows\soundman.exe)
> that pops up a dialog every time I boot this limited account asking
> for permission to run. I've tried unchecking the permission settings,
> and unblocking the program--by right clicking it.
>
> Am I missing something here?


--
steaminshrooms

 

[munchie]

Re: Program asks for permission every boot

On Sep 27, 12:54 am, steaminshrooms <steaminshrooms.2xj...@no-
mx.forums.net> wrote:
> does the program have to be run as an administrator?
> if so, there's pretty much no way to stop it from asking for permission
> without turning off user account control. (uac is located in control
> panel, under 'user accounts'). You really don't want to turn this off,
> though, as it will compromise your security pretty significantly.
> It sounds like you've already tried to un-check the 'run as
> administrator' box in properties.
> the program might be set to always run as an administrator. if it will
> run properly with normal permissions, then you can reverse its
> administrator status (provided it runs from a shortcut). if you
> right-click the shortcut [from which it runs] and go to its properties,
> there will be a 'shortcut' tab. click 'advanced' on the shortcut tab,
> and un-check the check box telling it to run as admin. if the file runs
> directly from an .exe, there will be no such tab.
>
> it's likely you will just have to eat it though. vista generally
> throws convenience to the wind, and emphasizes security.
>
> munchie;464480 Wrote:
>
> > I've got a program from a driver I installed (C:\windows\soundman.exe)
> > that pops up a dialog every time I boot this limited account asking
> > for permission to run. I've tried unchecking the permission settings,
> > and unblocking the program--by right clicking it.
>
> > Am I missing something here?
>
> --
> steaminshrooms

It seems you just can't unblock a startup program in the Windows
directory:
http://itsvista.com/2007/01/itsvista-tip-22-stop-security-warning-from-apps-on-vista/

 

[Jesper]

Re: Program asks for permission every boot

> It seems you just can't unblock a startup program in the Windows
> directory:
> http://itsvista.com/2007/01/itsvista-tip-22-stop-security-warning-from-apps-on-vista/

I don't think that's your problem is it? Your problem sounds like the little
tray icon pops up and says that Windows blocked a startup program?

If that is the case the reason is that the program requested administrative
privileges. Vista does not permit startup programs to do so. See KB
http://support.microsoft.com/kb/930367 for more details.

First, there is no initialized user interface to handle the elevation during
logon. Second, it is not a great security idea to always have some program
running as an administrator because a malicious program on the same desktop
can leverage the elevated one to compromise the computer.

The proper solution is to change the behavior of the program. Of course,
only the developer can do that. You need to check with the vendor for a Vista
compatible version of their program.

If you have no other options, and you have to have this program, you could
write a batch file that sleeps for a little while and then runs the program.
Then replace the entry that launches the program with one that launches the
batch file and it would work, but that's really a last resort.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20

 

[munchie]

Re: Program asks for permission every boot

On Sep 27, 10:30 pm, Jesper <Jes...@discussions.microsoft.com> wrote:
> > It seems you just can't unblock a startup program in the Windows
> > directory:
> >http://itsvista.com/2007/01/itsvista-tip-22-stop-security-warning-fro...
>
> I don't think that's your problem is it? Your problem sounds like the little
> tray icon pops up and says that Windows blocked a startup program?
>
> If that is the case the reason is that the program requested administrative
> privileges. Vista does not permit startup programs to do so. See KBhttp://support.microsoft.com/kb/930367for more details.
>
> First, there is no initialized user interface to handle the elevation during
> logon. Second, it is not a great security idea to always have some program
> running as an administrator because a malicious program on the same desktop
> can leverage the elevated one to compromise the computer.
>
> The proper solution is to change the behavior of the program. Of course,
> only the developer can do that. You need to check with the vendor for a Vista
> compatible version of their program.
>
> If you have no other options, and you have to have this program, you could
> write a batch file that sleeps for a little while and then runs the program.
> Then replace the entry that launches the program with one that launches the
> batch file and it would work, but that's really a last resort.
> ---
> Your question may already be answered in Windows Vista Security:http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20

First of all, thanks for your reply. It wasn't a blocked startup
program, but in-fact a driver that Vista placed in the windows
directly. To get around the unblocking "feature" I disabled it from
startup in Windows Defender (which somehow doesn't create blocked on
startup messages) then placed a copy of it in my Start Menu startup
directory.

Seems to be OK so far.

- Munchie