Self-Update Functionality (User Account Control)

AdminStudio 2023 | 25.0 | Application Manager

For this operating system compatibility test, the Windows Installer database is scanned for the presence of unmanifested executable files that are recognized as installations, upgrades, or patches. Heuristic analysis scans files that match any of the following criteria: *update*.exe, *setup*.exe,*install*.exe, *unins*.exe, or *patch*.exe for their User Account Control (UAC) awareness.

Test Group/Test Category

•

0319—Operating System Compatibility/Windows 8.1 (32-Bit)

•

0419—Operating System Compatibility/Windows 8.1 (64-Bit)

•

2819—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (32-Bit)

•

5619—Operating System Compatibility/Windows 10-20H2 (32-Bit)

•

5819—Operating System Compatibility/Windows 10-21H1 (32-Bit)

•

7019—Operating System Compatibility/Windows 10-21H2 (32-Bit)

•

7219—Operating System Compatibility/Windows 10-22H2 (32-Bit)

•

2919—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (64-Bit)

•

5719—Operating System Compatibility/Windows 10-20H2 (64-Bit)

•

5919—Operating System Compatibility/Windows 10-21H1 (64-Bit)

•

7119—Operating System Compatibility/Windows 10-21H2 (64-Bit)

•

7319—Operating System Compatibility/Windows 10-22H2 (64-Bit)

•

6719—Operating System Compatibility/Windows 11-21H2 (64-Bit)

•

7419—Operating System Compatibility/Windows 11-22H2 (64-Bit)

•

0519—Operating System Compatibility/Windows Server 2012

•

0619—Operating System Compatibility/Windows Server 2016

•

1019—Operating System Compatibility/Windows Server 2019

Severity

Warning

Message

This Windows Installer database contains self-update functionality in file [FILE_NAME] (Table: File, Key: [FILE_KEY]).

Background

Some software has a built-in mechanism to automatically update itself. Self-updating should be avoided in a managed environment due to lack of control over managed software and privilege issues. Furthermore, the self-update functionality might leave old files behind or cause issues when the software is being removed. Since Windows Vista, installation and update programs are recognized and, if UAC is enabled, cause prompts for credentials. This is done to prevent installations without the user’s knowledge and approval.

Resolution

The following resolutions are available.

Manual Fix

Self-update functionality of the software should be disabled.

Basic Auto Fix

A manifest file is added for each unmanifested installation or upgrade in a Windows Installer transform. The content of the manifest depends on whether the executable file is UAC aware. If the executable file is UAC aware, the manifest file sets the privilege level to requireAdministrator. If the executable is not UAC aware, the manifest file sets the privilege level to asInvoker.

This fix is enabled by default.

Advanced Auto Fix

Unmanifested executable files that matching the following patterns are removed in a Windows Installer transform: *update*.exe, *setup*.exe,*install*.exe, *unins*.exe or *patch*.exe.

Caution:This might have a high negative impact on application functionality.