It is not a matter of trusting the executable. It is the matter of the user
understanding (and consenting to) running something that requires
administrative privileges. UAC is not intended to warn people that some
executable might be bad. It is intended to enable people to run without admin
privs most of the time.

There is a third option for the manifest. You can also specify that the
executable should run with the maximum privilege available to the user. A
standard user would run the executable without elevation. A user in the
Administrators group would get prompted for elevation to create a token with
Administrators enabled. This is what is being used for regedit, for example.

"David Hearn" wrote:

> Nope, not even Microsoft do that - all their apps which require UAC get
> prompted - although the OS ones have a slightly different display than
> the signed/unsigned versions.
>
> D
>
> Joseph Geretz wrote:
> > So the capability of the manifest is to either:
> >
> > 1. Specify that the executable does not require elevation.
> > 2. Specify the the executable will require elevation, in which case Windows
> > will raise the elevation dialog before launching.
> >
> > But I guess there is no way to achieve the following?
> >
> > 3. Executable will require elevation. Executable is trusted and so Windows
> > will elevate the executable without prompting the user?
> >
> > No way to achieve option 3?
> >
> > Thanks,
> >
> > Joseph Geretz
> >
> > "Jesper" <Jesper@discussions.microsoft.com> wrote in message
> > news:2C62EC37-EAD9-4128-B3D8-EDF0806565CC@microsoft.com...
> >> That doesn't make it run without a UAC prompt. You can't do that unless, I
> >> surmise, you make a manifest that defines the execution level as the user
> >> with no elevation.
> >>
> >> "John Blessing" wrote:
> >>
> >>> "Joseph Geretz" <jgeretz@nospam.com> wrote in message
> >>> news:ey1YQA4WHHA.4076@TK2MSFTNGP05.phx.gbl...
> >>>> Is there anything I can do for my Setup MSI / EXE that will make it
> >>>> trusted so that it will automatically run elevated without prompting
> >>>> the
> >>>> user?
> >>>>
> >>>> Thanks!
> >>>>
> >>>> - Joe Geretz -
> >>> I think what you need is a code signing certificate - e.g. from
> >>> http://www.instantssl.com/
> >>>
> >>> --
> >>> John Blessing
> >>>
> >>> http://www.LbeHelpdesk.com - Help Desk software priced to suit all
> >>> businesses
> >>> http://www.room-booking-software.com - Schedule rooms & equipment
> >>> bookings
> >>> for your meeting/class over the web.
> >>> http://www.lbetoolbox.com - Remove Duplicates from MS Outlook,
> >>> find/replace,
> >>> send newsletters
> >>>
> >>>
> >>>
> >
> >
>