October 2006 - Posts

• Mark and Manmeet on .Net Show

  Mark and Manmeet appeared on the .Net show last week. Enjoy: http://msdn.microsoft.com/theshow/episode.aspx?xml=theshow/en/episode059/manifest.xml Maarten Read More... Posted Tuesday, October 24, 2006 5:09 PM by VistaCompatTeam | 0 Comments Filed under: Windows Vista Application Compatibilty XP port

• MSI uninstall gives unsigned dialog

  This week we again had the honor of getting the expert advise of one of the Windows Installer PMs ( here and here ). He mentioned that when uninstalling a signed msi package you still get the scary this-package-is-unsigned dialog. Reason is that the installer Read More... Posted Friday, October 20, 2006 9:51 PM by VistaCompatTeam | 2 Comments Filed under: windows Vista Application Compatibilty XP port MSI sign certificate installer

• rundll32.exe appwiz.cpl,NewlInkHere is back

  For some reason it was quite common to use an undocumented (and hence unsupported and we-can-pull-rug-underneath-at-any-time) export from the appwiz.cpl called newlinkhere. This export was removed in Vista. Since this was quite a popular export (live.com Read More... Posted Friday, October 20, 2006 9:44 PM by VistaCompatTeam | 2 Comments Filed under: Windows Vista Application Compatibilty XP port

• Session 0 isolation, COM and COM+

  Session 0 isolation is not limited to NT services. It also applies to COM+ server applications and COM out-of-process applications running under anything else than the interactive user. So all problems related to services living in a different Terminal Read More... Posted Friday, October 20, 2006 9:27 PM by VistaCompatTeam | 1 Comments Filed under: windows Vista Application Compatibilty XP port dllhost session 0

• Impact of Least Privilege in System Services

  Of all security changes in Vista, UAC with its spit token and MIC is for obvious reasons getting most attention. But there are a lot of other areas that have been tightened up for security reasons and we keep finding new ones that impact customers. One Read More... Posted Thursday, October 19, 2006 6:31 PM by VistaCompatTeam | 6 Comments Filed under: Windows Vista Application Compatibilty XP port

• Per-User COM on Vista for elevated token processes

  Per-user COM in Vista (where CLSIDs, etc. go under HKCU\Software\Classes instead of HKLM\Software\Classes) behaves different on Vista compared to XP. Actually it does not work at all for full administrators (to be precise, it is actually for any process Read More... Posted Tuesday, October 17, 2006 6:28 PM by VistaCompatTeam | 3 Comments Filed under: Windows Vista Application Compatibilty XP port

• Why you don't want to launch a process with a filtered token from a full token

  Our team works extensively with ISVs on Vista application compatibility – porting XP applications to Windows Vista. We frequently get the question "How can I launch a program with a filtered token from a program with a full token?" Although there sure Read More... Posted Tuesday, October 10, 2006 10:40 PM by VistaCompatTeam | 0 Comments Filed under: Vista application compatibility XP port

• Command line application with manifest asInvoker

  The recommendation for command line applications is to use requestedExecutionLevel=asInvoker in the manifest. If you would mark your console application as “requireAdministrator” (or “highestAvailable” and you are a member of the administrators group) Read More... Posted Thursday, October 05, 2006 11:22 PM by VistaCompatTeam | 1 Comments Filed under: Vista application compatibility XP port

• Elevation and process creation APIs

  In Vista, process creation APIs behave very differently with respect to UAC. If you call CreateProcess() on an executable which is manifested as “RequireAdministrator” or is flagged as an installer by Vista, you will get back an ERROR_ELEVATION_REQUIRED Read More... Posted Monday, October 02, 2006 8:36 PM by VistaCompatTeam | 3 Comments