pcalabria
asked on
Need help getting past.. allow this app from an unknown publisher to make changes to this device?
I have a requirement where I need to automatically boot a Win10 pro workstation and start our security camera software without user intervention.
I am using Autologin software suggested by ee expert McKnife to start Windows 10 and automatically enter a user ID and login. That works perfectly. Thank you.
I've also added MySecuritySoftware.exe to the shell:startup folder and have enabled autostarting of MySecurityProgram.exe in the Windows 10 apps--startup menu of setup.
The computer boots without ever running the program or producing an error message but also without starting the program.
When I attempt to start MySecurityProgram.exe manually by double-clicking I get
the message:
Do you want to allow this app from an unknown publisher to make changes to this device?
I have attempted (unsuccessfully) to fix this problem using gpedit by allowing medium risk programs and have entered the .exe extension.
Also, right-clicking the program link, and attempting to run as the administrator produces the same error message.
Can anyone figure out what's wrong?
I am using Autologin software suggested by ee expert McKnife to start Windows 10 and automatically enter a user ID and login. That works perfectly. Thank you.
I've also added MySecuritySoftware.exe to the shell:startup folder and have enabled autostarting of MySecurityProgram.exe in the Windows 10 apps--startup menu of setup.
The computer boots without ever running the program or producing an error message but also without starting the program.
When I attempt to start MySecurityProgram.exe manually by double-clicking I get
the message:
Do you want to allow this app from an unknown publisher to make changes to this device?
I have attempted (unsuccessfully) to fix this problem using gpedit by allowing medium risk programs and have entered the .exe extension.
Also, right-clicking the program link, and attempting to run as the administrator produces the same error message.
Can anyone figure out what's wrong?
ASKER
I did.. but it say I had to log in as administrator.. so I used my admin credentials.. and set the slider to never.. then logged in as the user.. and had the same problem.
I am concerned that I may have changed this setting on the whole network.. not just the user machine.. I may not know how to log into the local machine.. is that what I need to do?
I am concerned that I may have changed this setting on the whole network.. not just the user machine.. I may not know how to log into the local machine.. is that what I need to do?
You might have set the group policy to apply the setting for all. Or a windows update enforced this policy. Have a look at the below direction, it will exclude the .exe from prompting the error you received. It's generally not recommended as there is no known option to exclude a particular file, instead of allowing to run all .exe files.
Run GPEDIT.msc
Run GPEDIT.msc
Go to Group Policy and then expand:
Local Computer Policy / User Configuration / Administrative Templates / Windows Components / Attachment Manager
On the right pane, double click Inclusion list for low file types.
Click Enable.
Include the file type .exe in the Options box.
Click OK.
Hope this helps.
ASKER
Same Problem.
This is the same procedure as I followed for medium risk files.
Currently, both medium and low risk are set for .exe
I get the same message.
This is the same procedure as I followed for medium risk files.
Currently, both medium and low risk are set for .exe
I get the same message.
ASKER
I also turned off the firewall.
I get the same message.
I get the same message.
You would need to create a scheduled task. Set the task to run as you and check the box "run with highest privileges". Set it to run only when you are logged on. As task action, take just what you put into the startup folder. As task trigger, use "at logon of youruser".
That's all.
That's all.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Right, it's not about UAC at all. The description went "right-clicking the program link, and attempting to run as the administrator produces the same error message", missed that.
ASKER
So I am confused.. does anyone have a suggestion?
Perhaps you answered and I missed it?
Perhaps you answered and I missed it?
The message comes up because the executable guessing MySecurityProgram.exe is not signed using a Microsoft Authenticode Code Signing Certificate ergo the Unknown Publisher
A Standard Code Signing Certificate also will check with smartscreen (which needs an unknown amunt of uses to become trusted completely) while an EV Code Signing Certificate is trusted immediately
You need to sign the executable.
A standard Authenticode certificate until it gains trust will display
do you want to install program published by mycompany on this system
an ev Authenticode signed executable will skip this warning as it is trusted implicitly because EV certificates are harder to get and require more checking by the CA to issue it.
SignClickOnceApp-v2_1.zip
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I have recommended this question be closed as follows:
Accept: 'David Johnson, CD' (https:#a43187950)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
I have recommended this question be closed as follows:
Accept: 'David Johnson, CD' (https:#a43187950)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
Have you tried disabling UAC?
Type UAC in the search bar and run the app Change user account control settings.
Bring the bar to the bottom to Never Notify. Restart the computer.
Note: understand the risk of disabling UAC.