UAC Unknown Publisher

[jjohnson16]

Hello,

 

I have been tearing my hair out trying to get this program to work, in the end i had to turn UAC off, but that's not ideal because it breaks all the modern apps.

 

The message i get is UAC - Do you want to allow this app from an unknown publisher to make changes to your device?

 

I have tried various settings in GPO to try and let this run, but no luck.

 

My current settings are.

 

[TABLE=class: info]

[TR]

[TD]User Account Control: Admin Approval Mode for the Built-in Administrator account[/TD]

[TD]Disabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop[/TD]

[TD]Enabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode[/TD]

[TD]Elevate without prompting[/TD]

[/TR]

[TR]

[TD]User Account Control: Behavior of the elevation prompt for standard users[/TD]

[TD]Prompt for credentials[/TD]

[/TR]

[TR]

[TD]User Account Control: Detect application installations and prompt for elevation[/TD]

[TD]Disabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Only elevate executables that are signed and validated[/TD]

[TD]Disabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Only elevate UIAccess applications that are installed in secure locations[/TD]

[TD]Disabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Run all administrators in Admin Approval Mode[/TD]

[TD]Enabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Switch to the secure desktop when prompting for elevation[/TD]

[TD]Disabled[/TD]

[/TR]

[TR]

[TD]User Account Control: Virtualize file and registry write failures to per-user locations[/TD]

[TD]Enabled

 

[/TD]

[/TR]

[/TABLE]

I also receive a similar UAC popup with Java on Internet explorer, which is pretty annoying also.

 

Thank you!

[Chuckster]

Have a look here... https://www.focusedit.co.uk/group-policy-settings-for-uac/

 

Let us know what settings you've chosen in the end should it fix your problem.

[KevinH]

Application compatibility toolkit - create a shim with "run as invoker" from an admin account.

 

My experience here:

https://community.spiceworks.com/topic/1701013-pick-your-poorly-written-software-sir

 

It was kind of weird because it wouldn't run properly from the admin account I created it with, but as a different (restricted) user sailed right through.

 

The best option would be for them to sign their code, good luck with that though!

[jjohnson16]

KevinH you are a genius! That program fixes it! For anyone that is interested the program in question was USAVI, which is a Document scanner/Visualiser software.

 

The next problem is opening Internet Explorer gives me a UAC prompt that says - Do you want to allow this app to make changes to your device?

 

The program is Java SE Runtime Enviroment 8 Update 101.

 

I'm sure this is just a matter of getting the UAC settings right in GPO, but not sure what combination of settings removes this, yet!

[KevinH]

KevinH you are a genius! That program fixes it! For anyone that is interested the program in question was USAVI, which is a Document scanner/Visualiser software.

 

Awareness that the dog bites often is the result of having tooth marks in your bum at one point in time

 

Are you actually using Java when this prompt shows up? If not, disable the Java SSE helper add-on in Internet Exploder and the message will go away.