How does a task manager rise without a UAC request?

It was in my opinion once. I can open the task manager by pressing Ctrl + Shift + Esc , and on the second tab (Processes) I can easily press Alt + S - Show processes from all users to raise the task manager without any prompts . And voila, I have a powerful tool for the game. I was unable to find any documents explaining this, and I am very curious how this feat is achieved; since the button should really request an invitation, but it doesn’t.

+8
winapi uac elevation undocumented-behavior
source share
1 answer

What you are describing is called Auto Elevation . It does a lot more than just a task manager, but there is no way to make your program like this. For automatic lifting, the following requirements must be met.

  • <autoElevate>true</autoElevate> must be in the assembly manifest.
  • It should be located in one of several "safe" directories. A secure directory is one that standard users cannot modify, and include %SystemRoot%\System32 and most of its subdirectories, %SystemRoot%\Ehome , as well as several directories under %ProgramFiles% , which include Windows Defender and Windows Journal.
  • It must be digitally signed by the Windows publisher, which is the certificate used to sign all the code included in Windows (it is not enough to sign Microsoft, so Microsoft software that does not ship on Windows is not included)

You can do numbers 1 and 2 yourself, but you cannot fulfill requirement No. 3.

+12
source share

All Articles