Solved How to make LocalServiceControl.exe authorization go away?

Baeolophus · Feb 13, 2024

Every time one of my unprivileged user IDs logs in, the user (not RYANPC\admin, whose password is being requested) is presented with this:

Screenshot 2024-02-13 at 10.56.04 AM.png

For search engines: “Do you want to allow this app to make changes to your device?¶LocalServiceControl.exe¶Verified publisher: Hangzhou Hikvision Digital Tech.Co.,Ltd¶File origin: Hard drive on this computer¶Show more details¶To continue, enter an admin username and password.”

I have learned that this is some kind of helper app that facilitates communications with networked devices. Is there a way to configure this, so that the user does not have to enter the password of a privileged user to make this alert go away?

FreeBooter · Feb 13, 2024

LocalServiceControl.exe is an executable file that is part of the LocalServiceComponents software developed by Hangzhou Hikvision Digital Tech. This software is typically installed in the C:\Program Files (x86)\LocalServiceComponents directory.
It is part of the Hikvision iVMS4200 Client package for management and control of Hikvision DVR and camera systems. Signed by HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. using a Symantec certificate.

Baeolophus · Feb 13, 2024

FreeBooter said:
LocalServiceControl.exe is an executable file that is part of the LocalServiceComponents software developed by Hangzhou Hikvision Digital Tech. This software is typically installed in the C:\Program Files (x86)\LocalServiceComponents directory.
It is part of the Hikvision iVMS4200 Client package for management and control of Hikvision DVR and camera systems. Signed by HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO.,LTD. using a Symantec certificate.

Thanks very much!

So, how do I make the ask for an admin password go away?

FreeBooter · Feb 13, 2024

You need to uninstall the HikVision application.

LocalServiceComponents

www.hikvision.com

Baeolophus · Feb 13, 2024

FreeBooter said:
You need to uninstall the HikVision application.

Is there no way to elevate the permissions of LocalServiceControl.exe permanently, like with a Unix command:

Powershell:

chown -R root:wheel ./LocalServiceControl.exe

I mean isn’t that what putting in my password essentially does, just on this every-single-time basis?

FreeBooter · Feb 13, 2024

See giving Windows Defender exception will help other than that no you can't elevate a process you're not executing.

FreeBooter · Feb 13, 2024

Also you can disable startup service or program for LocalServiceControl.exe if you don't want it to launch at boot time.

garlin · Feb 13, 2024

Baeolophus said:
Is there no way to elevate the permissions of LocalServiceControl.exe permanently, like with a Unix command:

Powershell:

chown -R root:wheel ./LocalServiceControl.exe

I mean isn’t that what putting in my password essentially does, just on this every-single-time basis?

You're thinking about setuid, which doesn't exist on Windows. Since your user accounts are not Administrators, UAC confirmation isn't an option so the app has to ask for the Administrator's password.

If you really need to run this app, consider:
1. Figuring out where this app is being launched, using AutoRuns.
2. Creating an elevated on-demand scheduled task, to launch the app instead with Administrator rights.
3. Replacing whatever launches the plain app, with a reference to the elevated task.

Baeolophus · Feb 13, 2024

garlin said:
If you really need to run this app, consider:
1. Figuring out where this app is being launched, using AutoRuns.
2. Creating an elevated on-demand scheduled task, to launch the app instead with Administrator rights.
3. Replacing whatever launches the plain app, with a reference to the elevated task.

Isn’t it poor development practice, to require admin privileges for your software to run, unless it is some kind of admin utility?

garlin · Feb 13, 2024

Good practice would be splitting the software between an unprivileged user app, which talks to an elevated background service. If you need to manage the service, then provide a separate admin utility.

Baeolophus · Feb 13, 2024

FreeBooter said:
You need to uninstall the HikVision application.

That’s essentially the solution!

The HIKVision application was on the computer no longer. However, the folder containing LocalServiceControl.exe had an uninstaller in it. A restart later, I was able to trash the whole folder containing it.