[MagicAndre1981]

Hi, this is my second part of the series "What is the UAC".

People always disable the UAC because there is no way to disable the UAC for a specific program. is this really true?
No, it is not true. There is an build in way to do this!

Q: How can I do this?
A: Use the taskscheduler.

1. Start the computer management MMC snap-in

 00_Start_ComputerManagement.png (23.39K)
Number of downloads: 420

2. This step is optional: go to Task scheduler Library and make a right click and click "New Folder" (see picture 2)
and type in "myTasks" to create a new folder (see picute 3)

 01_TaskScheduler_NewFolder.png (29.99K)
Number of downloads: 258
 02_TaskScheduler_NewFolder_1.png (23.46K)
Number of downloads: 190

3. Make a right click on the folder myTasks and select "Create Task"

 03_TaskScheduler_CreateTask.png (16.15K)
Number of downloads: 206

and type in a name: I always name them "autoElevatePROGRAMNAME". Here for my expample "autoElevateProcessExplorer" and mark the checkbox "Run with highest priviligies".

 04_TaskScheduler_CreateTask_Config.png (24.53K)
Number of downloads: 358

4. go to the tab "Actions" and select the program you want to execute

 05_TaskScheduler_Action.png (24.38K)
Number of downloads: 339

and click ok, to create the Task.

5. create a new shortcut on your desktop and type in the following command:

C:\Windows\System32\schtasks.exe /RUN /TN "myTasks\autoElevateProcessExplorer"

Q: Do I have to do this for all programs I want to start?
A: Yes

Q: How Do I backup my tasks?
A: make a right click on the task and select "Export" and save it into a XML file and after a reinstall of your Windows
Vista / 7 select "Import Task" and import the XML file again.
Q: How do I start applications with administrator rights at startup?
A: You can copy the shortcut into the startup folder ( C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ) or run the task with a trigger (in the task creation window to to "triggers" and select "create Trigger" and choose "Begin the task" - "At logon". If you create such an trigger you don't have to put the shortcut into the startup folder.

So I hope I was able to show you how to start applications with elevated rights, without disabling the UAC and without being "annoyed" to accept the UAC prompt. I'm using this technique for 3 years (starting with Vista Beta2 Milestone Builds) now.

[Tedology]

I appreciate your efforts to help us out.

I've tried your instructions, and yet still when I double-click the shortcut, the UAC prompt still appears. I have even tried right-clicking the shortcut and choose "Run as Administrator" and it still is prompting.

[MagicAndre1981]

Hi,

don't choose "Run as Administrator"! Have you selected the checkbox "Run with highest priviligies"?

André

[Tedology]

MagicAndre1981, on Dec 21 2009, 02:53 AM, said:

Hi,

don't choose "Run as Administrator"! Have you selected the checkbox "Run with highest priviligies"?

André

Aha! I must not have checked that box. Thanks so much, Andre! (sorry, don't know how to make the accent over the 'e' on a PC)

[MagicAndre1981]

Ok, great that it works now

[Bonusforum.se]

MagicAndre1981, on Jun 28 2009, 12:59 PM, said:

Hi, this is my second part of the series "What is the UAC".

People always disable the UAC because there is no way to disable the UAC for a specific program. is this really true?
No, it is not true. There is an build in way to do this!

Q: How can I do this?
A: Use the taskscheduler.

1. Start the computer management MMC snap-in

00_Start...nagement.png

2. This step is optional: go to Task scheduler Library and make a right click and click "New Folder" (see picture 2)
and type in "myTasks" to create a new folder (see picute 3)

01_TaskS...ewFolder.png
02_TaskS...Folder_1.png

3. Make a right click on the folder myTasks and select "Create Task"

03_TaskS...eateTask.png

and type in a name: I always name them "autoElevatePROGRAMNAME". Here for my expample "autoElevateProcessExplorer" and mark the checkbox "Run with highest priviligies".

04_TaskS...k_Config.png

4. go to the tab "Actions" and select the program you want to execute

05_TaskS...r_Action.png

and click ok, to create the Task.

5. create a new shortcut on your desktop and type in the following command:

C:\Windows\System32\schtasks.exe /RUN /TN "myTasks\autoElevateProcessExplorer"

Q: Do I have to do this for all programs I want to start?
A: Yes

Q: How Do I backup my tasks?
A: make a right click on the task and select "Export" and save it into a XML file and after a reinstall of your Windows
Vista / 7 select "Import Task" and import the XML file again.
Q: How do I start applications with administrator rights at startup?
A: You can copy the shortcut into the startup folder ( C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ) or run the task with a trigger (in the task creation window to to "triggers" and select "create Trigger" and choose "Begin the task" - "At logon". If you create such an trigger you don't have to put the shortcut into the startup folder.

So I hope I was able to show you how to start applications with elevated rights, without disabling the UAC and without being "annoyed" to accept the UAC prompt. I'm using this technique for 3 years (starting with Vista Beta2 Milestone Builds) now.

This doesnt work for me (or shall I restart windows or something?)
I have added the tasks and created the shortcut and run it but still it still says "Do you want to open this program" :S?

Or do you mean that we always should use this shortcut when we want to open (not the orginal exe-file?)

[MagicAndre1981]

yes, always run the shortcut!

[CompletelyLost]

I followed your instructions and applies it to Windows 7, Everything worked out fine. And then, when I tried to make a short cut, the command line was incorrect. With a little inventigation, I discovered window 7 uses "tasksch" instead "schtask" as used in step 5. However, changing that part of the line didn't work either. So, a little more investigation, i found this "%Windir% preceeding the command for task scheduler. Can you look into Step 5 for Windows 7? I like to use this for my other programs.

[MagicAndre1981]

Hi,

my guide works under Windows 7! Windows 7 still uses the schtask.exe and nothing else.

Post your steps and post which program you're trying to start and which error did you see!

André

[drosalion]

Thanks alot for this, been searching the web for a solution to this frustrating problem - yours worked perfectly, thanks.

[Necuima1]

Hi Andre,

I think that this is what I've been looking for. I am "in conversion" from XP PRO to Windows 7 (dual boot at the moment) and have a small utility that I'd like to run in Win 7 (Home Premium). It runs in XP PRO SP3 compatibility mode and is called Crystal Internet Meter. It will start manually but requires the UAC OK. I tried your technique here to try to get it to start automatically at start up (which it does in XP PRO) without the UAC message. But every time I try to run the short cut I get a message saying that the utility is already running. But it's not - I've checked the task manager and it is definitely not running.

Any suggestions will be welcomed.

Thank you in anticipation.

[MagicAndre1981]

uncheck all compatibility options.

Please also export the task as a xml file and post it here.

[Necuima1]

Thank you for getting back to me on this. I checked and all compatibility options are off.

Here's the XML...


<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.3" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
<RegistrationInfo>
<Date>2010-06-26T21:15:12.2936476</Date>
<Author>Win7-PC\Win7</Author>
<Description>To Auto-Start Crystal Internet Meter</Description>
</RegistrationInfo>
<Triggers />
<Principals>
<Principal id="Author">
<UserId>Win7-PC\Win7</UserId>
<LogonType>Password</LogonType>
<RunLevel>HighestAvailable</RunLevel>
</Principal>
</Principals>
<Settings>
<MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
<DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
<StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
<AllowHardTerminate>true</AllowHardTerminate>
<StartWhenAvailable>false</StartWhenAvailable>
<RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
<IdleSettings>
<StopOnIdleEnd>true</StopOnIdleEnd>
<RestartOnIdle>false</RestartOnIdle>
</IdleSettings>
<AllowStartOnDemand>true</AllowStartOnDemand>
<Enabled>true</Enabled>
<Hidden>false</Hidden>
<RunOnlyIfIdle>false</RunOnlyIfIdle>
<DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
<UseUnifiedSchedulingEngine>false</UseUnifiedSchedulingEngine>
<WakeToRun>false</WakeToRun>
<ExecutionTimeLimit>P3D</ExecutionTimeLimit>
<Priority>7</Priority>
</Settings>
<Actions Context="Author">
<Exec>
<Command>"C:\Program Files\Crystal Internet Meter\cimeter.exe"</Command>
</Exec>
</Actions>
</Task>

[MagicAndre1981]

Hi,

change the logon type to:

<LogonType>InteractiveToken</LogonType> (only run when the user is logged on)

Your configuration will run the task in session 0 (the services session and you can't see the UI)

[Necuima1]

Hi Andre,

Thanks for getting back to me. I edited the XML, deleted the current task and tried to import the edited XML but got an error. What paremeter should I set to get the "InteractiveToken" when I rebuild the task from scratch. Also, the utility runs a small window showing the trafiic going up and down the (ADSL) line, so I definitely want to see that window - does your statement "you can't see the UI" imply that I would not be able to see the traffic window?

Thanks again for your help.

[MagicAndre1981]

Edit the task inside the Task scheduler and select "Run only when user is logged on"

[riod]

Hi Andre, here's is my issue:
I'm trying to run that program in a user account, is there a way to work around the admin password that pops up every time or does the scheduler just doesn't care about the fact that an admin created the task? and I will never be able to run that program in the user's account unless I give that person the admin password :s

[MagicAndre1981]

riod, on 01 July 2010 - 08:54 PM, said:

and I will never be able to run that program in the user's account unless I give that person the admin password :s

this workaround only works for accounts who are inside the administrator group.

[Necuima1]

MagicAndre1981, on 01 July 2010 - 03:29 AM, said:

Edit the task inside the Task scheduler and select "Run only when user is logged on"

Hi Andre, great! It will start OK now without the UAC message - thanks. Now, how can I get it to auto-start when I start up the computer? I tried pinning the shortcut to the start menu but it does not start. Thanks again in anticipation.

[MagicAndre1981]

copy the shortcut the the following folder:

C:\Users\YOURUSERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup