Welcome to the Privilege Authority Community

PrivilegeAuthority is a product from ScriptLogic that allows administrators to elevate privileges for specific programs, windows features or ActiveX controls, without running every user as an administrator.

Privilege Authority provides a powerful, flexible way to tighten overall security on a workstation, without preventing people from doing their jobs. It is available from scriptlogic.com and other popular download sites as a Professional edition and a free community edition.

Professional edition includes additional security capabilities and technical support from ScriptLogic. This community is for all Privilege Authority users to collaborate, brainstorm new elevation rules, share rules with other users, and provide bug reports and enhancement requests back to ScriptLogic.

Unanswered Active Topics Forums Search
Forums > Privilege Authority Community Forum > Community Technical Support
XP and WIN7
Last Post 08 Dec 2011 03:45 PM by Don Reynolds (ScriptLogic). 3 Replies.
Printer Friendly
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
BengaulUser is Offline
New Member
New Member
Posts:16

--
07 Dec 2011 08:45 AM  
I have a few rules on a test OU that work for XP machines, but when I try them on Windows 7, the UAC prompt comes up. Is there an easy fix?
Don Reynolds (ScriptLogic)User is Online
ScriptLogic
ScriptLogic
Posts:61

--
07 Dec 2011 02:29 PM  
Can you provide details on some of these rules which have a problem on Win7?

Also, on Vista and above, you might need to adjust the "Integrity" level of the rule to "high". To do this, check the "Display advanced options" checkbox in the bottom left corner of the "rules wizard" to have it display the "Integrity" tab.
BengaulUser is Offline
New Member
New Member
Posts:16

--
08 Dec 2011 08:37 AM  
Hi,

Thanks for getting back. One of the rules I have is for Adobe Reader. I have a rule for Adobe Reader that uses the path to the executable: *\AdbeRdr1011_en_US.exe and a file hash. In Groups I added the Administrators security group, and I have now set the integrity level to high.

The Other rule I have set up is for AcroRead. This seems to be spawned by the main process, and is the MSI. So the path I used is *\AcroRead.msi, and I also have a hash. Groups, I have again applied the administrators, and the integrity is set to high.

This has all worked in 32bit XP, but the 64bit 7 machine always pops up the UAC dialogue.

Ben
Don Reynolds (ScriptLogic)User is Online
ScriptLogic
ScriptLogic
Posts:61

--
08 Dec 2011 03:45 PM  
Since your new OS is 64bit Win7 (and not the 32-bit XP), is it possible that the executables that you created the rules for (*\AdbeRdr1011_en_US.exe and *\AcroRead.msi) are different from the ones that are being attempted to run on Win7?

I would suggest removing the filehash (which as generated against the exe's setup for 32-bit windows) to see if the rules then work on 64-bit Win7. Also, since you mentioned that the AcroRead is actually spawned from the main process, checking the "Apply settings to child processes" checkbox for the original rule might have been enough to elevate this installation without needing the second rule.

Let me know your results.
You are not authorized to post a reply.
Forums > Privilege Authority Community Forum > Community Technical Support
Active Forums 4.2