Apps that need Admin privileges errors out in EventViewer

[ernest-ho]

Getting an error when trying to run FanControl.exe (which needs admin privileges)

.earlystart:

"C:\Users\Ernest Ho\TranslucentTB\TranslucentTB.exe"
"C:\Program Files (x86)\FanControl\FanControl.exe"

Event Viewer Log:

System.Runtime.InteropServices.COMException (0x800702E4): The requested operation requires elevation. (Exception from HRESULT: 0x800702E4)
   at EarlyStart.Service.OnSessionChange(SessionChangeDescription changeDescription) in C:\Users\Charles\Git\EarlyStart\EarlyStart\Service.cs:line 54

[sylveon]

I can add functionality to launch processes as admin, however using the list from ~/.earlystart would be a privilege escalation vulnerability (unelevated processes could write to the file then get launched as admin).

A solution would be to store the list of apps launched as admin in an admin-only writeable place (e.g. C:\ProgramData) so that you have to go through UAC to modify it.

Alternatively, use an executable running within the user session to launch the apps, letting UAC work as intended. But I suppose if UAC popped up it would defeat the purpose for you?

[ernest-ho]

Thanks for the reply, if the functionality was not planned for that's alright. The vulnerability is probably no worth it.

On another note, even when I'm removing the FanControl.exe from my .earlystart. I'm getting a:
.earlystart:

"C:\Users\Ernest Ho\AppData\Local\Microsoft\WindowsApps\ttb.exe"

^following #1

Event Viewer Log:

System.Runtime.InteropServices.COMException (0x80070154): The supplied kernel information version is invalid. (Exception from HRESULT: 0x80070154)
   at EarlyStart.Service.OnSessionChange(SessionChangeDescription changeDescription) in C:\Users\Charles\Git\EarlyStart\EarlyStart\Service.cs:line 54