Link to home
Start Free TrialLog in
Avatar of pcalabria
pcalabriaFlag for United States of America

asked on

Need help getting past.. allow this app from an unknown publisher to make changes to this device?

I have a requirement where I need to automatically boot a Win10 pro workstation and start our security camera software without user intervention.

I am using Autologin software suggested by ee expert McKnife to start Windows 10 and automatically enter a user ID and login.  That works perfectly. Thank you.

I've also added MySecuritySoftware.exe to the shell:startup folder and have enabled autostarting of MySecurityProgram.exe in the Windows 10 apps--startup menu of setup.

The computer boots without ever running the program or producing an error message but also without starting the program.

When I attempt to start MySecurityProgram.exe manually by double-clicking I get
the message:

Do you want to allow this app from an unknown publisher to make changes to this device?

I have attempted (unsuccessfully) to fix this problem using gpedit by allowing medium risk programs and have entered the .exe extension.

Also, right-clicking the program link, and attempting to run as the administrator produces the same error message.

Can anyone figure out what's wrong?
Avatar of Mohammed Basheer
Mohammed Basheer

Hi
Have you tried disabling UAC?
Type UAC in the search bar and run the app Change user account control settings.
Bring the bar to the bottom to Never Notify. Restart the computer.
Note: understand the risk of disabling UAC.

User generated image
Avatar of pcalabria

ASKER

I  did.. but it say I had to log in as administrator.. so I used my admin credentials.. and set the slider to never.. then logged in as the user.. and had the same problem.

I am concerned that I may have changed this setting on the whole network.. not just the user machine.. I may not know how to log into the local machine.. is that what I need to do? 
You might have set the group policy to apply the setting for all. Or a windows update enforced this policy. Have a look at the below direction, it will exclude the .exe from prompting the error you received. It's generally not recommended as there is no known option to exclude a particular file, instead of allowing to run all .exe files.

Run GPEDIT.msc

  • Go to Group Policy and then expand:

  • Local Computer Policy / User Configuration / Administrative Templates / Windows Components / Attachment Manager

  • On the right pane, double click Inclusion list for low file types.

  • Click Enable.

  • Include the file type .exe in the Options box.

  • Click OK.

 

Hope this helps.



Same Problem.

This is the same procedure as I followed for medium risk files.
Currently, both medium and low risk are set for .exe
I get the same message.
I also turned off the firewall.
I get the same message.

You would need to create a scheduled task. Set the task to run as you and check the box "run with highest privileges". Set it to run only when you are logged on. As task action, take just what you put into the startup folder. As task trigger, use "at logon of youruser".
That's all.
ASKER CERTIFIED SOLUTION
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Right, it's not about UAC at all. The description went "right-clicking the program link, and attempting to run as the administrator produces the same error message", missed that.
So I am confused.. does anyone have a suggestion?
Perhaps you answered and I missed it?
The message comes up because the executable  guessing MySecurityProgram.exe is not signed using a Microsoft Authenticode Code Signing Certificate  ergo the Unknown Publisher
A Standard Code Signing Certificate also will check with smartscreen (which needs an unknown amunt of uses to become trusted completely) while an EV Code Signing Certificate is trusted immediately

You need to sign the executable.
A standard Authenticode certificate until it gains trust will display
do you want to install program published by mycompany on this system

an ev Authenticode signed executable will skip this warning as it is trusted implicitly because EV certificates are harder to get  and require more checking by the CA to issue it.
SignClickOnceApp-v2_1.zip
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: 'David Johnson, CD' (https:#a43187950)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer