Accessible UAC Prompts

There have been some comments on the blog recently suggesting that the UAC dialog boxes in Windows Vista are not accessible and I just wanted to clear up the confusion here.

First, to set the scene though.  When a user attempts to access an application or setting that requires elevated privileges to run, they are presented with a UAC prompt, the appearance of which will vary depending on the type of user they are or the type of application that is trying to run.  This diagram shows the types of dialog boxes that you might see and the process flow that triggers each type:

UAC

There is also a credential prompt which will be displayed if the current user is not an administrator:

UAC 2

These prompts are protected from receiving communications from other applications so that malicious software cannot simulate the actions of users.  This is obviously a problem for screenreaders or other applications that need to use UI Automation in order to provide interaction with the User Interface.   This problem has a solution though.

In order to gain access to the UAC prompts - or other processes running at a higher privilege level - an application must be trusted by the system and run with special privileges.  To make this happen the application should be built with a manifest file that includes the following elements and attributes:

<trustInfo xmlns="urn:0073chemas-microsoft-com:asm.v3">

    <security>

        <requestedPrivileges>

        <requestedExecutionLevel

            level="highestAvailable"

            UIAccess="true" />

        </requestedPrivileges>

    </security>

</trustInfo>

The important tag to note is the UIAccess, which must be true in order for the application to gain access to the UAC prompts.

There is an MSDN article which you should refer to for more information: http://msdn2.microsoft.com/en-us/library/ms742884.aspx


Comments

  1. Posted on: March 26, 2007 at 7:07PM  

    Well, I found out from MS Support that the keyboard's OK. I was able to get into Safe Mode after some BIOS work. However, because I've got a Media Center Extender account (xbox 360), which for some reason is an admin account, safe mode will not enable the Administrator account (apparently, it checks to see if another admin account is enabled but does not check if that account will show up on the welcome screen)

    So there you have it. So far, the only solution I've been given is a System Restore, but I'll lose 2 weeks of emails and development work. I can go the rest of my life without reading an MS press release mentioning "Trustworthy Computing" for the rest of my life.

  2. Posted on: May 20, 2007 at 1:35PM  

    I can't remember being so frustrated in my life with an Operating System - Vista!!!!!

    Here's an easy thing I thought I could do this morning: create a shortcut in the start menu pointing to an html file located in C:\program files.

    After finding the new location in Vista for the start menu tree (c:\program data\microsoft\windows\start menu) and trying to paste in the shortcut, a dialog box always comes up saying, "windows cannot create a shortcut here, do you want it placed on the desktop instead".

    Nooooo!  I yelled at my pc.  I checked permissions and they showed full control for administrator, which I am.  OK, I tried creating the shortcut a different way by right clicking in that start menu folder, then selected New and all that's available is Folder - not Shortcut.

    Alright, I calmly thought as my blood pressure began uncontrollably rising.  I closed Windows Explorer, then right clicked and said to run Explorer as administrator.  I encountered the same damn problem.

    How in the Hell does a person put a shortcut in a programs folder in the Start Menu with Windows Vista???  Gawd, I am so teed off with Vista.  I am ready to go back to XP or over to Linux Kubuntu.  Anything besides this mess of complications and frustration.

  3. Posted on: November 06, 2008 at 7:40AM  

    pasdelacc

  • Page:
  • 1
  • 2
  • 3

Trackbacks

  1. Posted by: Eric Denekamp on January 29, 2007 at 8:58AM

    On Windows Vista Blog there is a nice article about UAC and the prompts you get and what they will look

  2. Posted by: InstallSite Blog on February 07, 2007 at 9:32AM

    An article in the Windows Vista Team Blog shows the various types of UAC prompts and in which case (singed

  3. Posted by: Partner-TV: telling it like it is on February 15, 2007 at 12:39PM

    Now that Windows Vista has been released to manufacturing, some new assistive technologies have also

  4. Posted by: James Finnigan on March 14, 2007 at 1:09PM

    I've moved onto the Windows Experience team. It should a lot of fun to continue to follow Guided Help,

  5. Posted by: RSS It All on March 14, 2007 at 1:23PM

    I&#39;ve moved onto the Windows Experience team. It should a lot of fun to continue to follow Guided

  6. Posted by: InstallSite Blog on April 18, 2007 at 1:10PM

    Recently I encountered a strange problem when I tried to install an MSI based setup on Windows Vista.