Attaching or embedding manifest files
If you want to deploy an application to the Windows Vista
operating system that meets the certification requirements of the
Windows Vista Logo program, you must follow User Account Control
(UAC) guidelines. The executable file must have an embedded manifest
that defines the execution level and specifies whether access to
the user interface of another window is required. The Vista Application
Information Service (AIS) checks the manifest file to determine the
privileges with which to launch the process. Use the Security tab
page in the Project painter to specify these properties.
Generate options
Select Embedded manifest if your application needs to be certified
for Vista. A manifest file with the execution level you select is
embedded in the application’s executable file.
You can also select External manifest to generate a standalone
manifest file in XML format that you ship with your application’s
executable file, or No manifest if you do not need to distribute
a manifest file.
Execution level
Select As Invoker if the application does not need elevated
or administrative privileges. Selecting a different execution level
will probably require that you modify your application to isolate
administrative features in a separate process to receive Vista certification.
Select Require Administrator if the application process must
be created by a member of the Administrators group. If the application
user does not start the process as an administrator, a message box
displays so that the user can enter the appropriate credentials.
Select Highest Available to have the AIS retrieve the highest
available access privileges for the user who starts the process.
UI access
If the application needs to drive input to higher privilege
windows on the desktop, such as an on-screen keyboard, select the “Allow
access to protected system UI” check box. For most applications
you should not select this check box. Microsoft provides this setting
for user interface Assistive Technology (Section 508) applications.
Authenticode signing required
If you check this box, the application must be Authenticode
signed and must reside in a protected location, such as Program
Files or Windowssystem32.