If I run a process that requires a UAC confirmation from the user, the Windows UAC prompt appears and waits for the user to confirm the action. With the UAC prompt open, if I look at the list of running processes, the original application appears.

What state is this process in? Presumably it has started running as it appears as a process, but it cannot have done anything yet as that would surely defeat the purpose of UAC.

link|improve this question

60% accept rate
Do you mean a process that has the elevation required flag set in it's manifest, or a process that requests elevation after it starts? – Hello71 Aug 17 '10 at 2:22
@Hello71: The second case. The process has tried to do something that requires administrative rights. – adrianbanks Aug 17 '10 at 9:10
Is UAC virtualization enabled for the process? – Hello71 Aug 17 '10 at 14:42
@Hello71: No, it is not. – adrianbanks Aug 17 '10 at 23:07
Then the process has to explicitly request elevation, and the thread requesting elevation is blocked until the call returns. Same as any other waiting call (networking, for example). – Hello71 Aug 17 '10 at 23:37
feedback

2 Answers

up vote 1 down vote accepted

Might be helpful http://msdn.microsoft.com/en-us/library/bb756945.aspx

alt text

Found that link here http://msdn.microsoft.com/en-us/library/bb757008.aspx

link|improve this answer
feedback

The process is given an ID ready for launch, if you block access the process is terminated, the process is just in memory but contains no data until allow is pressed.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.