January 16, 2007

Windows Vista - User Account Protection

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

I got this email from a guy I work with:

From a guy’s blog:

“Windows Vista introduced a new feature in the newest build called User Account Protection and one of the side effects is that it can intercept software from writing files back into the %windir% or %progfiles% directories and silently redirect the file to a different location.”

This means all Lotus Notes installations on Vista machines must be put in C:\Lotus (or some other folder off the root). The Windows and Program Files directories have the weird protection mechanism, and Notes isn’t designed to deal with Vista’s trickery.

So, the symptom is, when the Domino administrator issues changes that modifies the user’s ID file (ie. a certificate update), Windows won’t let the Notes client Modify the real ID file, it points it to the Virtual-machine-like temp directory for programs running from the Program Files or Windows directories, not the real file.

Is this a good thing or a bad thing?  It’s certainly good to know, but are there any developers out there with some insight?

Comment

Trackback uri

http://www.moreron.com/2007/01/16/windows-vista-user-account-protection/trackback/

2 Comments on Windows Vista - User Account Protection »

January 16, 2007

A Developer @ 9:40 pm:

Watch is the registry does the same thing for HKEY_LOCAL_MACHINE/Software keys for programs that don’t have a manifest.

Also if anyone knows what a mysterious user names $ running some svchost.exe processes does in Windows Vista please let me know so I can pass the info onto Microsoft.

A Developer @ 9:42 pm:

Stupid blog that is the [computername]$ user. I did it with pointy brackets and it thought it was the new computername HTML tag I guess.

Leave a Comment