How not to require UAC prompt for custom MMC files?

barreleye · Dec 6, 2023

On my main system, a long time ago, I used Author Mode to save MMC files for Computer Management, Services, and some others so the window sizes, pane widths, etc would be remembered on subsequent runs. Running the .msc files always gives me a UAC prompt, and I've thought nothing of it for years. However, I just realized I don't get that prompt on my Windows 10 file server, and it's because I'm not using the custom .msc files to launch them. Indeed, when I run, for example, "%windir%\system32\services.msc" on my Windows 11 system, I don't get a UAC prompt. How can I get my custom files to work the same way? NB: I used Author Mode on a one-time basis, so I'd have to use it again to make changes, and it's not like my custom files are implicitly using Author Mode and thus eliciting the UAC prompt. That is, there's nothing under the File menu but "Options..." and "Exit" when I start them normally.

Ghot · Dec 6, 2023

barreleye said:
On my main system, a long time ago, I used Author Mode to save MMC files for Computer Management, Services, and some others so the window sizes, pane widths, etc would be remembered on subsequent runs. Running the .msc files always gives me a UAC prompt, and I've thought nothing of it for years. However, I just realized I don't get that prompt on my Windows 10 file server, and it's because I'm not using the custom .msc files to launch them. Indeed, when I run, for example, "%windir%\system32\services.msc" on my Windows 11 system, I don't get a UAC prompt. How can I get my custom files to work the same way? NB: I used Author Mode on a one-time basis, so I'd have to use it again to make changes, and it's not like my custom files are implicitly using Author Mode and thus eliciting the UAC prompt. That is, there's nothing under the File menu but "Options..." and "Exit" when I start them normally.

What level is your UAC set to? You may just have to lower it a notch.

barreleye · Dec 6, 2023

Ghot said:
What level is your UAC set to? You may just have to lower it a notch.

UAC is set to the default.

Both Windows 11 and 10 systems behave the same. Using services.msc as the example, launching the one in System32 does not invoke UAC. However, starting it by right-clicking and choosing "Author" does invoke UAC. Immediately doing a Save As to a new file on (say) the desktop produces a .msc file that invokes UAC when run normally, unlike the one in System32.

Ghot · Dec 7, 2023

barreleye said:
UAC is set to the default.

Both Windows 11 and 10 systems behave the same. Using services.msc as the example, launching the one in System32 does not invoke UAC. However, starting it by right-clicking and choosing "Author" does invoke UAC. Immediately doing a Save As to a new file on (say) the desktop produces a .msc file that invokes UAC when run normally, unlike the one in System32.

I'm lost as to WHY you're doing what you're doing.
In other words, what are you trying to accomplish?

If you're just trying to save window settings, there's a much easier way...

GitHub - kangyu-california/PersistentWindows: fork of http://www.ninjacrab.com/persistent-windows/ with windows 10 update

fork of http://www.ninjacrab.com/persistent-windows/ with windows 10 update - kangyu-california/PersistentWindows

github.com

As for why some things are different in Windows 11... MS has tried to make Win 11 "more" secure.
I'm not sure they're succeeding, but they are trying. That may be why UAC behaves a bit differently on Win 11.

Personally, I just turn UAC down, in fact, I turn it OFF on Win 10 and Win 11.

barreleye · Dec 7, 2023

Ghot said:
I'm lost as to WHY you're doing what you're doing.
In other words, what are you trying to accomplish?

I explained that in the first sentence of my first post.

garlin · Dec 7, 2023

The answer is rather obscure, but UAC & mmc have a known exceptions list for .msc files shipped with Windows, which are both digitally signed and located in \Windows\System32. If you use TrustedInstaller rights to replace System32\diskmgmt.msc with your custom .msc file, it still requires UAC to open.

Windows 7 UAC prompting on generic MMC, but not on Administrative MMC

Solution: Ask and ye shall receive!Windows 7 has a hard coded white list for auto elevation. This includes more than 60 windows executables and most all the

community.spiceworks.com

So you would have to modify UAC rights to skip the prompt.

barreleye · Dec 7, 2023

garlin said:
The answer is rather obscure, but UAC & mmc have a known exceptions list for .msc files shipped with Windows, which are both digitally signed and located in \Windows\System32. If you use TrustedInstaller rights to replace System32\diskmgmt.msc with your custom .msc file, it still requires UAC to open.

Windows 7 UAC prompting on generic MMC, but not on Administrative MMC

Solution: Ask and ye shall receive!Windows 7 has a hard coded white list for auto elevation. This includes more than 60 windows executables and most all the

community.spiceworks.com

So you would have to modify UAC rights to skip the prompt.

Thank you. This mystery was really bugging me!

Ghot · Dec 7, 2023

barreleye said:
Thank you. This mystery was really bugging me!

As I mentioned... the answer is just turn UAC down a notch or two.

Ghot · Dec 7, 2023

garlin said:
The answer is rather obscure, but UAC & mmc have a known exceptions list for .msc files shipped with Windows, which are both digitally signed and located in \Windows\System32. If you use TrustedInstaller rights to replace System32\diskmgmt.msc with your custom .msc file, it still requires UAC to open.

Excellent description.

dacrone · Dec 7, 2023

Add all the snap ins you want. Save the Mmc console. Use winaero tweaker to create an elevated shortcut. If you don’t want to use the tool to create it, you can read how it does it and create it manually. It uses the task scheduler

barreleye · Dec 7, 2023

dacrone said:
Add all the snap ins you want. Save the Mmc console. Use winaero tweaker to create an elevated shortcut. If you don’t want to use the tool to create it, you can read how it does it and create it manually. It uses the task scheduler

I will look into that. I've used Task Scheduler to avoid UAC for startup programs, and it would be cool if it could be used in a more general yet still strictly targeted sense for certain shortcuts I create. Lowering UAC from the default at the OS level as elsewhere suggested is a non-starter for multiple reasons.