Why do files get placed in “C:\Users\AppData\Local\VirtualStore\Program Files(x86)”?

by

An application that is not running with raised privileges should does not have access to the Program Files and Program Files (x86) directories. This is good for safety. In addition, in most cases when a developer tells his program to save data in the Program Files folder, for example, program settings, he has completely forgotten that program settings should be a per-user thing! That is, every user on the local computer should be able to use the program without affecting the other users. In other words, a well-behaved application should instead save its settings in the

C:\Users\<User Name>\AppData\Local\<Manufacturer>\<Product>\<Product Version>

directory.

For instance, my AlgoSim software writes to

C:\Users\<User Name>\AppData\Local\Rejbrand\AlgoSim\2.0

Of course, the

C:\Users\<User Name>\AppData\Local\

path must be looked-up dynamically at runtime. Use

SHGetFolderPath(0, CSIDL_LOCAL_APPDATA, 0, SHGFP_TYPE_CURRENT, @path);

for this.

Ever since Windows Vista, applications that are not running with raised privileges that try to write to the Program Files (or Program Files (x86)) folder will in fact write to the VirtualStore folder, unknowingly. Microsoft thought that this would be better than a program failure (caused by the access restriction). And indeed, thanks to this, most old programs that save their settings in the Program Files folder will continue to work with Windows Vista+, and each user will get her own settings, as a bonus, even though the original software manufacturer did not think of this.

You can use a manifest to tell Windows that your application is aware of VirtualStore and that Windows should not change any paths during runtime. But if you really want to be able to write to the Program Files folder, then I think that you have to run the application with raised privileges, every time, which is inadvisable in general.

The details on how to create manifests to make your program display the UAC prompt on each execution, and how to disable VirtualStore, have been addressed at several previous Stack Overflow questions. Feel free to use the search box!

More Related Contents:

  1. Disabling UAC programmatically
  2. How to prevent Vista from requiring elevation on patch.exe?
  3. Request UAC elevation from within a Python script?
  4. Maximum filename length in NTFS (Windows XP and Windows Vista)?
  5. Detect if running as Administrator with or without elevated privileges?
  6. How to elevate privileges only when required?
  7. Does Windows 7 restrict folder access as Vista does?
  8. Windows 7 and Vista UAC – Programmatically requesting elevation in C#
  9. How to run NOT elevated in Vista (.NET)
  10. Request Windows Vista UAC elevation if path is protected?
  11. How can I detect if my process is running UAC-elevated or not?
  12. How do I retrieve the version of a file from a batch file on Windows Vista?
  13. Process.Start with different credentials with UAC on
  14. CreateDesktop() with vista and UAC on (C, windows)
  15. How can I auto-elevate my batch file, so that it requests from UAC administrator rights if required?
  16. Make Inno Setup installer request privileges elevation only when needed
  17. Requested registry access is not allowed
  18. How to request administrator permissions when the program starts?
  19. How can I run a child process that requires elevation and wait?
  20. Run process as administrator from a non-admin application
  21. C++ – GetUserName() when process is run as administrator
  22. windows batch files: setting variable in for loop
  23. How to associate a program with a file type, but only for the current user?
  24. How do I create a manifest file to launch application with admin privileges?
  25. UAC elevation does not allow drag and drop [duplicate]
  26. Programmatically prevent Windows screensaver from starting
  27. how to get process handle from process id?
  28. Selectively disabling UAC for specific programs on Windows Programatically
  29. Do high-integrity tokens *have* to have the Administrators group enabled?
  30. Bypassing elevation when launching a new process

Leave a Comment