If I had to guess, I would say it's because the launched process isn't a child of the elevated Window, but is a child of Explorer (the shell) itself. This isn't the case with a CMD prompt, whereby the launched process is an actual child process.
Test it with Sysinternals' process explorer. --Paul ----- Original Message ----- From: joe To: ActiveDir@mail.activedir.org Sent: Tuesday, November 21, 2006 10:49 PM Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack The Vista source isn't available for perusal yet so this is a complete guess but I expect it is something like Explorer purposely "dumbs down" the process token used to launch the new process. Its just a guess though... -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm ------------------------------------------------------------------------------ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Tuesday, November 21, 2006 2:56 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack Steve - thanks again for sharing this very useful information. I've tested this with different scenarios and I am somewhat confused as to some of the "great new features" of how Vista handles the security of new threads when launching applications: 1. I can install the AdminPak as non-privileged local user and can fix the DLL registration in an elevated CMD prompt with your tip below - works fine. 2. When I install the AdminPak from an elevated CMD prompt right away, everything also works fine - no need to manually register the DLLs. 3. When I start the AdminPak installation from an elevated Windows Explorer window, it does not successfully register the DLLs and again I have to register the DLLs manually in an elevated prompt to get them to work 4. When I right-click the AdminPak installation file in a Windows Explorer window and choose "Run as administrator" (i.e. running the install in elevated mode), it's the same as when launched from an elevated command prompt and again everything work fine without the need for manual registration of DLLs. So what's different from launching applications from an elevated Windows Explorer window to launching them from an elevated CMD prompt? Thanks for any insights J /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan Sent: Tuesday, November 21, 2006 5:46 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack You have to run the batch from a command prompt that is elevated or you will get access denied. To run a cmd prompt elevated search for cmd.exe from the start menu and right click selecting "Run As Administrator". We have also found that if you simply launch the MSI from an elevated command prompt it will register the DLLs as well. Thanks, -Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN Sent: Tuesday, November 21, 2006 9:25 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack I found this write up from someone else yesterday, I can't remember where now. I tried it immediately and ran into a couple immediate errors when trying to register these DLLs and the Active Directory snap-ins still continued to be non-functional. This is using the Win2003 SP1 admin pack on Vista Business RTM. Basically, I threw all those commands into a text file named register.cmd and let it run. Certtmpl.dll - Your user account does not have necessary access rights to register the Certificate Templates snap-in. Log on with a different user account and try again, or contact your system administrator. (I am local admin on this Vista box). Mprsnap.dll - Access is denied. (80070005) Even those two DLLs don't seem to be related to the Active Directory snap-ins, I still get the error that the MMC could not create the snap-in. Anyone else run into this? ~Ben From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan Sent: Monday, November 20, 2006 10:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack KB is in the works, just takes time. Feel free to blog it or I can if I get some time this week, it is a bit slow this week but I have a backlog of content that I was supposed to have blogged. Good news is that I accepted a new role at Microsoft where maintaining an official blog is part of my job. J Thanks, -Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Monday, November 20, 2006 11:45 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] Vista Admin Tools Pack okay if you aren't going to blog or KB that .. may someone on this list? Steve Linehan wrote: You can install the Windows Server 2003 SP1 admin pack on Vista RTM, a shim was added to support this. Once it is installed you will need to register the DLLs needed for the various snap-ins manually from an elevated command prompt. Here is a complete list in case you need them: regsvr32 /s adprop.dll regsvr32 /s azroles.dll regsvr32 /s azroleui.dll regsvr32 /s ccfg95.dll regsvr32 /s certadm.dll regsvr32 /s certmmc.dll regsvr32 /s certpdef.dll regsvr32 /s certtmpl.dll regsvr32 /s certxds.dll regsvr32 /s cladmwiz.dll regsvr32 /s clcfgsrv.dll regsvr32 /s clnetrex.dll regsvr32 /s cluadmex.dll regsvr32 /s cluadmmc.dll regsvr32 /s cmproxy.dll regsvr32 /s cmroute.dll regsvr32 /s cmutoa.dll regsvr32 /s cnet16.dll regsvr32 /s debugex.dll regsvr32 /s dfscore.dll regsvr32 /s dfsgui.dll regsvr32 /s dhcpsnap.dll regsvr32 /s dnsmgr.dll regsvr32 /s domadmin.dll regsvr32 /s dsadmin.dll regsvr32 /s dsuiwiz.dll regsvr32 /s imadmui.dll regsvr32 /s lrwizdll.dll regsvr32 /s mprsnap.dll regsvr32 /s msclus.dll regsvr32 /s mstsmhst.dll regsvr32 /s mstsmmc.dll regsvr32 /s nntpadm.dll regsvr32 /s nntpapi.dll regsvr32 /s nntpsnap.dll regsvr32 /s ntdsbsrv.dll regsvr32 /s ntfrsapi.dll regsvr32 /s rasuser.dll regsvr32 /s rigpsnap.dll regsvr32 /s rsadmin.dll regsvr32 /s rscommon.dll regsvr32 /s rsconn.dll regsvr32 /s rsengps.dll regsvr32 /s rsjob.dll regsvr32 /s rsservps.dll regsvr32 /s rsshell.dll regsvr32 /s rssubps.dll regsvr32 /s rtrfiltr.dll regsvr32 /s schmmgmt.dll regsvr32 /s tapisnap.dll regsvr32 /s tsuserex.dll regsvr32 /s uddi.mmc.dll regsvr32 /s vsstskex.dll regsvr32 /s w95inf16.dll regsvr32 /s w95inf32.dll regsvr32 /s winsevnt.dll regsvr32 /s winsmon.dll regsvr32 /s winsrpc.dll regsvr32 /s winssnap.dll regsvr32 /s ws03res.dll Thanks, -Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Monday, November 20, 2006 9:47 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] Vista Admin Tools Pack > I would assume that an Administration Tools Pack should be quickly on the way soon for Vista Errr.... That struck me a little funny... What exactly in the past would make you even start to assume this. ;o) History has taught us exactly the opposite though we have been quite vocal in the complaints on the lack of left/right hand coordination on this topic. If we have something prior to LongHorn RTM I think we will be doing pretty well. I am an optimistic cynic - I hope for the best and plan for the worst... -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm ------------------------------------------------------------------------------ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN Sent: Saturday, November 18, 2006 8:58 PM To: ActiveDir@mail.activedir.org Subject: [OT] Vista Admin Tools Pack With the release of Vista to MSDN as well as the Microsoft Licensing site for download, I would assume that an Administration Tools Pack should be quickly on the way soon for Vista. Anyone have any information on when a Vista compatible Adminpak will be available? I would've run Vista Beta 2 full time on my work desktop to test it out, but with the inability to install the adminpak that severly limited Vista's usefulness to me. Thanks, ~Ben List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
