FAF CLIENT ALWAYS AS ADMIN

@katharsas said in FAF CLIENT ALWAYS AS ADMIN:

  • Disabled UAC entirely

Yes that's it!

  • When i have UAC disabled, then the FAF client should respect that and don't check any user account settings.

I Disabled UAC years ago XD

That window is quite annoying and should be purged. Give us an option to do it, please.

Imo being annoying is an important function of that window. If you are doing unsafe things like running apps as admin that have no business being run as admin, then you should be annoyed about it until you wisen up and set up your computer properly. I mean I’m no windows expert for sure, but in general it is much more secure to be running as an unprivileged user and only elevate your privileges in the situations where you actually need admin. Running as the super user all the time is just asking for trouble.

@azmodeu said in FAF CLIENT ALWAYS AS ADMIN:

I Disabled UAC years ago XD

This is a fairly important security feature of Windows and you should not be using your operating system in this way unless you know very well what you're doing.

I built that window. I would have built an check box sure, BUT I do the check and the warning before ever starting the acctual client programm. Because I wanna avoid doing any operations as an admin. So I can not call any other functionally than I code explitically for that functionallity... and as @Askaholic said just change your system to not run programms with privilidges... it is BAD

Soon™️

Well @Azmodeu we are writting a dummy value in the registry 😉 so however your system is configured u are doing something wrong. Because this window only pops up if we are able to write/read from the registry

Soon™️

https://github.com/FAForever/downlords-faf-client/blob/cf2a14238666e2afa8537c8563423227fa34b3e7/src/main/java/com/faforever/client/util/WindowsUtil.java#L8

Should this function falsebly return that you are an admin I am more than welcome to change it

Soon™️

Seems like cals what we are using is deprecated

Soon™️

So I take back what I said:
We are not writing registry even tho I think that would also be a way to determine if one has privileges.
We are using cacls.exe to read the permissions of a file we should not be able to read...
https://docs.microsoft.com/de-de/windows-server/administration/windows-commands/cacls
Screenshot 2021-06-12 142642.png

Soon™️

If you open Task Manager under details you can click on the table header and select columns(on right click). You can add a column showing you if a process is elevated(Herraufgestuft in German, my windows is in German).

if the client shows as not elevated but shows the warning. We can have you guys type in a commands in a terminal(cmd) and check what commands work better to determine if you are admin.

Soon™️

Screenshot 2021-06-12 144009.png
what it should look like

Soon™️

Heraufgestuft = Elevated

Soon™️

Btw if you are not using windows 10 that might be the reason... but I am not sure if I would change it for ppl that are not using a OS with support.

Soon™️

@axel12 said in FAF CLIENT ALWAYS AS ADMIN:

Btw if you are not using windows 10 that might be the reason... but I am not sure if I would change it for ppl that are not using a OS with support.

So you are deciding how i have to use my PC ?
This is at least interesting if not outrageous.

I stop arguing here since it looks like it depends on your opinion not on support for users.

I think it is more that it would be a burden from the development standpoint to try and figure out how to implement detection for a depreciated OS

Ehm I offer my help 😄 I don't have to capabilities to decide

Soon™️

You miss understood me. I offer to fix it if it should be the case that anybody is using windows 10 and the check is broken.

Soon™️

Im not with the error anymore after doing some things to run without admin mode.

Even without error i got to task manager and faf is not on admin mode but it istill creates folder on ProgramData and recreates a mydocuments there where i need to put the mod/maps or it wont show on my launcher.

Im feed up with this i dont need help anymore since my problem was not being able to create a lobby with my mods/maps to play a private games with friends, if i select the mods inside the game everyone was kicked saying they dont have the mods(even when everyone had).

This was caused by this ProgramData folder where i need to put the mods/maps on instead of the real C:\Users\xxx\Documents\etc.

Yes this is the case in FAF because Anti Virus often gets mad at the client for editing documents folder so the default now is to use programmdata. Because we had a million complains where client was not able to read/write the folder. There is a setting to turn it back if you want to. Also in the menu you can click open mod folder and it will open the currently set one.

Further you could upload the maps/mods then FAF will take care of installing them.

You can of course suggest other solutions but as far was I am aware there is not much other choices. Writing stuff to documents folder in win 10 is sub optimal as I far as I am aware.

Soon™️