Search code examples
cwindowswinapipersistenceuac

Persistence for high mandatory level application - windows

I'm writing application that needs to be run in high mandatory level and needs to run every time the OS is starting. I tried to put it in Run in registry and in Startup directory and it didnt run after a restart. Im doing this from C code using Winapi, the code is working, when Im using it with regular privileges apps it works normaly. I changed the "UAC Execution Level" option in the linker to highestAvailable.

How can I get the app running at high mandatory level every restart?

*Note: I dont try to bypass UAC or elevate to high privilege with exploit, I want it to be legitimate with UAC and run at every restart.

Solution

  • You can either:

    • Create a service, or
    • Configure Task Scheduler to create a logon app (example here). The IPrincipal interface has a method to set the admin requirement.

    That way, you will register your app once with UAC prompt and then it will run each restart in elevated mode.