Accessible UAC Prompts

There have been some comments on the blog recently suggesting that the UAC dialog boxes in Windows Vista are not accessible and I just wanted to clear up the confusion here.

First, to set the scene though.  When a user attempts to access an application or setting that requires elevated privileges to run, they are presented with a UAC prompt, the appearance of which will vary depending on the type of user they are or the type of application that is trying to run.  This diagram shows the types of dialog boxes that you might see and the process flow that triggers each type:

UAC

There is also a credential prompt which will be displayed if the current user is not an administrator:

UAC 2

These prompts are protected from receiving communications from other applications so that malicious software cannot simulate the actions of users.  This is obviously a problem for screenreaders or other applications that need to use UI Automation in order to provide interaction with the User Interface.   This problem has a solution though.

In order to gain access to the UAC prompts - or other processes running at a higher privilege level - an application must be trusted by the system and run with special privileges.  To make this happen the application should be built with a manifest file that includes the following elements and attributes:

<trustInfo xmlns="urn:0073chemas-microsoft-com:asm.v3">

    <security>

        <requestedPrivileges>

        <requestedExecutionLevel

            level="highestAvailable"

            UIAccess="true" />

        </requestedPrivileges>

    </security>

</trustInfo>

The important tag to note is the UIAccess, which must be true in order for the application to gain access to the UAC prompts.

There is an MSDN article which you should refer to for more information: http://msdn2.microsoft.com/en-us/library/ms742884.aspx


Comments

  1. Posted on: February 02, 2007 at 7:02AM  

    Considering neither James or anyone else monitoring these blogs from Microsoft have chosen to respond with any real answer with any substance to the messages and responses left to these posts I surmise that you either agree that Microsoft and Screen readers are discriminating against people who depend on screen readers or you just don't care.  How can MS say that "Vista is their most accessible screen reader" when they completely understand the troubles this update is causing to Visually impaired computer users all over the world.  My company are updating to Vista soon but Freedom Scientific don't even have an update released for my screen reader yet.  That's just unexceptable.  MS have the power and in my opinion responsibility to ensure this doesn't happen.

    James, referencing another blog post available on your private blog where you speak to Saqib Shake, I know you have an interest in accessibility and I commend you for airing this interest publicly but I would request that you give us some idea of what MS are doing to fullfill their accesibility requirements in respect to the situation of third party vendors such as Freedom Scientific.  

    Isn't it also strange that the one feature that is so widely touted is the feature that FreedomScientific and GWMicro turn off when their application is running?  Visually impaired users who use Vista will not have the option of any of your new arrow features.

    Thanks for a great product.  It's just a pity that it is not only going to cost a fortune for people outside the US to upgrade to, it's also going to cost a fortune for visually impaired and blind users to get access to as well due to bloted screen reader upgrade prices!

    I await a response.  I'm sure my Email address is available to you via my registration details so please feel free to contact me privately if you have anything to say that cant be said on a blog.

  2. Posted on: February 02, 2007 at 7:29AM  

    Darragh, Response is coming - it's been a very busy week for me what with the launch of Vista and Office 2007.

    James

  3. Posted on: February 07, 2007 at 11:35AM  

    Hi r3m0t and Dera

    You both raised concerns about needing to upgrade your screenreaders to work with Vista.  As I'm sure you're aware, Vista's a significant upgrade to XP, and so the XP version of your screenreader can't be expected to run on Vista.  This is the same situation as for various other mainstream products - many people will need to get upgrades to their favourite software to make it run on Vista.

    Both for mainstream software vendors and also for assistive technology vendors the decision regarding how much to charge for upgrades, when to release an upgrade, and who is eligible for a certain price upgrade, is the choice of the software vendor and not Microsoft.

    I appreciate screenreaders are a bit difference since blind peoples' livelihoods depend on them, but Microsoft still has no power to demand any given partner should make a particular pricing decision.

    Back in January 2006 Microsoft invited all the assistive technology vendors to a porting lab in Redmond, and the assistive Technology Group has worked with them through the process.  We've already seen some manufacturers release Vista-compatible versions, and all the major screenreader vendors have made statements about Vista compatibility.

    I put this response together thanks to Saqib Shaikh who works as a developer for MS in the UK.  He's blind and he's just started using Windows Vista with one of the compatible screenreaders.  I hope to get an video interview with him soon on his experience so stay tuned...

    James

  4. Posted on: February 08, 2007 at 8:48AM  

    Hello James,  thanks for your response.  I appreciate your answer and I understand what you say.  I however do not believe that there is nothing Microsoft could have done or still could do to help with this upgrade.  You say that this is a completely different version of Windows, True, but the necessity for accessibility is still the same as it was in XP to those who depend on screen readers.  I really don't understand how you can think that it is exceptable for Blind users of Windows to be fourced to pay this accessive upgrade price for software that they depend on and software that is necessary to access a system that Microsoft should take responsibility for.  Your Nerrator is a great application considering the very few resources you put into it but it just about fulfills your obligations and no more.  You still haven't answered why it doesn't provide access to the U A C window.  Considering the fix is as easy as you want us to believe should this not have been done a long time ago?  You say that the article was written with the input of saquip.  Are you saying that he agrees that Screen reader developers such as FreedomScientific should have the freedom to impose these prices on visually impaired and Blind perspective Vista users? As another Blind person, I really doubt that.  He knows just as much as I do that screen reader prices are unfair and in my firm belief, Microsoft as the developer of this system that requires such a baddly developed add on to enable the bolt on accessibility features developed by A-T companies. and therefore they should stand up and take responsibility for their neglect to serve a growing user base.  Expecting us to pay for accessibility that should be included in the operating system from the ground up is just crazy.  I don't expect a response to this from Microsoft but if one is provided I expect to be as vague and misleading as usual.  Don't get me wrong.  I use Microsoft products every day.  I am reliant on them for employment and most other things in my day to day life.  I don't see Microsoft as a big bad company.  I see them as an organization with the resources to make a big difference to accessibility.  I didn't and will never expect Microsoft to incorporate full accessibility into any of their systems or applications but what I do expect is for them to support their customers from time to time when it is very obvious a third party is taking complete advantage.

  5. Posted on: February 13, 2007 at 4:18AM  

    Darragh

    Narrator does work with UAC.  When a UAC dialog box is opened a new instance of narrator launches running with elevated privileges.

    There are a large number of Assistive Technology Vendors who we work very closely with to ensure they offer functioning accessibility products.  You can find the full list of vendors here: http://www.microsoft.com/enable/at/matvplist.aspx.

    You might also be interested in the full list of Microsoft AT Products here: http://www.microsoft.com/enable/at/vista/

    It's not Microsoft's place to dictate prices to vendors like these but to ensure that they can create products that allows full accessibility.  You are right that Microsoft does have the resources to build full accessibility into its products and in doing so remove the need of vendor products.  Whether or not that is the right thing to do is a complex argument on many levels and one which I'm sure you can appreciate.

    Best Regards

    James

  6. Posted on: February 13, 2007 at 6:40AM  

    Thanks again for your response James,

    Nerrator did not work with UAC on the machines that were used during the demonstration of Vista in Ireland in January and it doesn't work in my office at the moment.  Actually on a similar note, I have Vista in my office but Jaws still doesn't work with it.  

  7. Posted on: February 13, 2007 at 8:11AM  

    Darragh

    I can't explain why Narrator wasn't working on the demo machines in Jan, but I can assure you I saw it succesfully interact with UAC yesterday.  Windows Eyes also works with UAC.  The Jaws version that works with Windows Vista is not available until mid february.

    For more information I would check out the January podcast from Freedom Scientific with their CTO: http://www.freedomscientific.com/FSCast/episodes/fscast002-january2007.asp.

    They talk high-level technical about the fundamental changes in Windows Vista and why it requires accessibility software to be re-engineered.

    Hope this helps

    James

  8. Posted on: February 21, 2007 at 7:32PM  

    thx for share description.

    http://www.dl4all.com

  9. Posted on: March 01, 2007 at 4:58AM  

    Hello,  I just couldn't let it pass without commenting on the latest Jaws public beta.  Just so the rest of the world know,  Blind people who depend on computer access via Jaws for Windows had to wait a total of 28 days before they could take advantage of this operating system.  For some of us, this meant asking our employers to hold off their roleout for this long.  That can seem like an eturnity when everyone in your companies IT department is pushing on you to get up to date.  Now, we finally have a public beta and guess what!  Both the log in screen and user access control isn't working.  Now James, You said in a previous post that gaining access to the User Access Controls was as simple as editing an XML file.  This seems to be in correct. Or, FS really haven't spent two years in close consultation with Microsoft.  I know it's not the responsibility of Microsoft to ensure FS release support for all your features.  I just wanted to make the point that nothing as as easy as it seems to be.  Especially when it comes to software development.  If it was, we wouldn't have had to wait 28 days for access to Vista and we would already have access to both the Secure desktop and the User Access Control screens.  Thanks for reading and I look forward to any responses.  P.S. I'm looking for a job! Any vacancies???

  10. Posted on: March 26, 2007 at 12:11PM  

    Lemme share my Vista UAC story (it's an "I NOW HATE VISTA" story, so beware): http://kpatrick.spaces.live.com/blog/cns!D96649A68453CFE1!266.entry

    Basically, I've got the last UAC prompt you are showing, but no admin account is listed (and the Administrator account *is* there). Coupled with Vista apparently disabling my USB/F-Lock MS keyboard (Natural 4000), not only can I not do anything admin-related, I can't even get into Safe Mode!

    So how about putting that CTRL-ALT-DEL login prompt back into the Welcome screen or making UAC a bit more robust? I've been unable to debug a web app all weekend (it was due for delivery today, in fact), and have spent over 3 hours on the phone with MS Support about it.

  • Page:
  • 1
  • 2
  • 3

Trackbacks

  1. Posted by: Eric Denekamp on January 29, 2007 at 8:58AM

    On Windows Vista Blog there is a nice article about UAC and the prompts you get and what they will look

  2. Posted by: InstallSite Blog on February 07, 2007 at 9:32AM

    An article in the Windows Vista Team Blog shows the various types of UAC prompts and in which case (singed

  3. Posted by: Partner-TV: telling it like it is on February 15, 2007 at 12:39PM

    Now that Windows Vista has been released to manufacturing, some new assistive technologies have also

  4. Posted by: James Finnigan on March 14, 2007 at 1:09PM

    I've moved onto the Windows Experience team. It should a lot of fun to continue to follow Guided Help,

  5. Posted by: RSS It All on March 14, 2007 at 1:23PM

    I&#39;ve moved onto the Windows Experience team. It should a lot of fun to continue to follow Guided

  6. Posted by: InstallSite Blog on April 18, 2007 at 1:10PM

    Recently I encountered a strange problem when I tried to install an MSI based setup on Windows Vista.