cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
grigorgn
Level 3

Change standard token for setup.exe

Hi,

Currently, when installing our product with UAC on, using a protected Administrator account (not the built in "Administrator" account), the user must right click Setup.exe and select "Run as administrator". This is because the manifest in Setup.exe indicates that the default access token should be a standard token, and must be manually elevated through this extra step.

To eliminate this extra step we need to modfiy the embedded manifest of Setup.exe. In its manifest, the "requestedExecutionLevel" attribute is current set to "asInvoker" which tells Setup.exe to launch with a standard user token by default. If we change this value to "highestAvailable", Setup.exe will launch with an administrator token, thus eliminating the extra right-click step.
In Visual Studio projects, by default, "asInvoker" is the default value for this attribute, and its quite easy to change this value through project properties. However, I'm not sure how to change this for Setup.exe.

Could you please help?
Thanks.
Labels (1)
0 Kudos
(2) Replies
vidyam
Level 2

This is applicable to InstallScript MSI Projects, point to Media, click Releases. Select the required release, and set the 'Required Execution Level" property.
0 Kudos
DebbieL
Level 17

This setting is also available in Basic MSI projects and in InstallScript projects.
0 Kudos