Different Way to handle UAC

[transambird_2000]

Anyone see a way to get this to work with Chunk? It has always worked great with pchelpware.

original post
https://forum.ultravnc.net/viewtopic.php?f=31&t=14867

Code: Select all

    Name "UAC Request Disabler (Temporary) for PcHelpWare"
    OutFile "PcHelpWare.exe"
    RequestExecutionLevel admin

    SilentInstall silent


    Section
      ReadRegDWORD $0 HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System AdminBackup
      IfErrors +3 0
        ReadRegDWORD $1 HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System UserBackup
        Goto Repair

      ReadRegDWORD $0 HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System ConsentPromptBehaviorAdmin
      ReadRegDWORD $1 HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System ConsentPromptBehaviorUser

      IfErrors NoUAC
        WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System AdminBackup $0
        WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System UserBackup $1

        Repair:

        WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System ConsentPromptBehaviorAdmin 0
        WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System ConsentPromptBehaviorUser 0

        ExecWait '"PcHelpWareRun.exe"'

        WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System ConsentPromptBehaviorAdmin $0
        WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System ConsentPromptBehaviorUser $1

        DeleteRegValue HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System AdminBackup
        DeleteRegValue HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System UserBackup

        Goto Ende

    NoUAC:
      ExecWait '"PcHelpWareRun.exe"'

    Ende:
    SectionEnd

[supercoe]

Basically there was similar code in ChunkVNC 3.2 to disable UAC but I removed it simply because installing as a service is a better option.

When you install as a service you can control the UAC prompts so it doesn't matter what the end users configuration is.

The reason I choose to design InstantSupport to first run as a regular user is because of domain environments where you may never have administrative privileges.


This topic has come up a lot lately it seems.... Maybe someone could explain a better way of handling it but I just don't see why it's a big deal to use the install service option in the tray icon to control UAC?

[transambird_2000]

I have a lot of cases where the user walks away from the computer the minute i take control. They are not there for the UAC prompt to install the service. I like the idea of the service, but it seems a little redundant to connect then disconnect and then reconnect, because 9 times out of 10 i need admin level control to do what i need to do. Don't get me wrong i like chunk, i was just curious if this type of control was even an option.

[supercoe]

It may be best in your case to modify instant support to simply install the service right off the bat.

[ich]

supercoe - is there something in place to enable install as service when it's launched? I didn't see anything in config last time I built my EXE.
Come to think of it, it would be nice to have a prompt "Do you want to install as a service?" when it's launched so it can be skipped on XP machines, and have the Install as Service do the same as triggering it from the taskbar with the remove icon on the desktop.

By the way, what new stuff do you have in store for us with the next ChunkVNC? And when? Loving this whole project.

[supercoe]

ich,

Mods like this are the reason I released the source code with the project. Adding this functionality is fairly easy once you take a peek at SRC\InstantSupport.au3

Not saying I wouldn't add this functionality later I just like to weigh both sides of the coin.

I use InstantSupport pretty much all day long and when you talk to the people I have to talk to you would understand why I don't present any options to the end user.
It can be a chore sometimes to get people to simply let go of the mouse before they close the ID number and say "I did what?" !!

At this point nothing is planned but since it has been such a long time without a release I'll refresh the project for Windows 8.
I installed 8 Pro to test some things for Rudi and all I have to say it's going to confuse people that's for sure!
I suppose this gives us job security so it's not all bad...

[ich]

supercoe,
I feel you, bro. It's a struggle to even get ChunkVNC running for some of the people I have to support. One of the reasons I love ChunkVNC so much is it's just my logo and a giant number presented to the client, and I still have occasions where "go to my website, click the link, run the file or save it somewhere you can find it and then run it, and read me the number" appears to be beyond their skill set. I don't even want to think about the pain that is a finicky anti virus or 3rd party firewall program...

I have "programming dyslexia" that is only apparent when trying to work with code but I can usually accomplish what I set out to do with some perseverance and frequent breaks. I may just work on getting it to install the service when launched and forget about confusing options like YES/NO...

[supercoe]

ich,

You hit the nail on the head, getting people to even download InstantSupport.exe can be a pain sometimes!

How about this, you give it your best go on looking at the code and when you're completely stuck post here with your question and I'll help you out.