SyMenu - Troubleshooting & Bug Reports - V.4.14-UAC features not work with built-in adminis - Messages https://ugmfree.it/forum/messages.aspx?TopicID=399 SyMenu - Troubleshooting & Bug Reports - V.4.14-UAC features not work with built-in adminis - Messages en-us http://blogs.law.harvard.edu/tech/rss Thu, 03 Dec 2015 08:03:04 GMT Thu, 03 Dec 2015 08:03:04 GMT https://ugmfree.it/forum/messages.aspx?TopicID=399 Message from Gianluca Thanks.]]> Thu, 03 Dec 2015 08:03:04 GMT https://ugmfree.it/forum/messages.aspx?TopicID=399 Message from VVV_Easy_Symenu I describe how to reproduce the bug.
1) Three accounts:
  • "UserSyMenu" -> Normal Users Group
  • "Owner" and "Administrator" (Built-in administrator) -> Administrators Group
2) Running with "UserSymenu" (NO UAC authorization):
  • Elevating with password "Owner" ->UAC=OK; Shield=OK (appears)
  • Elevating with password "Administrator" -> UAC=OK, Shield=NOK (no appears)
(Note: To be able to use built-in administrator account: "net user administrator /active:yes" or with "lusrmgr.msc").
------------------------------------------------------------------------------------------
Even it is not important issue, it's a pity to keep without fixing so I want to try to help.
I think it is easy to detect if you work in "Elevate mode" with the Windows CMD "whoami"
For instance the following solution:
  • whoami /groups | find "S-1-16-12288" && Echo I am running elevated, so I must be an admin anyway ;-)
works fine in Elevated CMD windows with the build in Administrator and with "normal" administrator account.
------------------------------------------------------------------------------------------
Links:
Windows CMD "whoami"
Proposed Solution:
Windows Integrity Mechanism Design (Mandatory Levels):
Security Identifiers Technical Overview:
Windows desktop applications > Design > Guidelines > Windows Environment > User Account Control
]]> Tue, 01 Dec 2015 20:56:13 GMT