I haven't found a complete answer for this UAC windows 6,7 question

Question

"Even if your application has been signed with the IT strong name that gives it Full Trust, you still cannot ... access certain parts of the ... registry."  Yes, but

Can an installer, running as an elevated task, create keys under HKLM/software/OurProduct that can be written to by OurProduct, run by standard users without providing administrator credentials?  Can OurProduct create subkeys under HKLM/software/OurProduct (unelevated)?

Answer 1

In other words, what can you do at install time, when the user has elevated you,
that will give you a runtime registry zone under HKLM where you can do as you please,
without virtualization and without elevation?

Answer 2

Hello Rick,

Please take a look at the following documentation, it describe several ways to install a Package with Elevated Privileges for a Non-Admin.

http://msdn.microsoft.com/en-us/library/aa369519%28VS.85%29.aspx

Thanks,

Rong-Chun Zhang

---

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
Welcome to the All-In-One Code Framework! If you have any feedback, please tell us.

Answer 3

Thanks.  I don't see how that relates to my question.  Let me try again.

I want all users on a machine to be able to run -- not install, but run -- my application without virtualization and without elevation.
I want all users on that machine to be able to change configurations of my application for all other users on that machine.
In the past, I have used the registry, under HKLM, under a sub-key created specifically by and for my application.
How can I continue to do that without virtualization and without elevation?

Answer 4

At install time you would create a new key under HKLM, then ACL it to have the permissions needed by your unelevated users so they can have whatever level of access they need.