CODEWITHSUNDEEP
c#windows-installeruacelevation
Brian Gillespie
Brian Gillespie

Reputation: 3273

.NET 2.0 Process Elevation for App Installation

We have an application written in both C++ and .NET that installs for all users in the Program Files folder. This application downloads new versions of itself (as MSI installers) and spawns the new installer process to replace itself.

The install process as it exists today:

  1. Copy an install manager app (C#, .NET 2.0) to the temp directory. Call this 'Manager'
  2. Manager is executed with elevated privs per this article.
  3. The original application exits.
  4. Manager spawns the MSI installer (with elevated privs, since the copy is elevated)
  5. Manager spawns the new version of the app.

The bug:

The newly installed app is running in an elevated state. This causes problems I won't enumerate here.

Ideally, the launch of the newly installed app would be run with the permissions of the original user.

I can't figure out how to demote the app back to being the standard user after elevation.

An inelegant hack:

(yeah, yeah, this whole process is inelegant anyway)

  1. Copy the install manager to the temp directory
  2. Run the install manager with standard user privs. Lets call this instance 'LowlyManager'.
  3. Original application exits.
  4. LowlyManager spawns the app again, this time with elevated privs. Let's name this instance 'UpperManagement'
  5. UpperManagement spawns the installer
  6. UpperManagement exits gracefully, returning the exit code of the installer.
  7. LowlyManager interprets the error code from UpperManagement, and spawns the newly installed application. This time as the original invoker.

Is there a better way to do this?

(I've left out a bunch of other details before and after these steps that make the process smoother for the user, but this should be enough to understand the core of the problem I'm trying to solve.)

Other requirements:

Upvotes: 0

Views: 792

Answers (1)

Kyle Alons
Kyle Alons

Reputation: 7135

One way: http://www.codeproject.com/KB/vista-security/VistaElevator.aspx

Another way (mentioned in most recent comment in previous article): http://brandonlive.com/2008/04/27/getting-the-shell-to-run-an-application-for-you-part-2-how/

Upvotes: 1

Related Questions