I have an application called F5 edge client, it's a vpn solution. We use Win 7 64 bit Ent SP1.

The vendor have a tool where it compiles an exe (no option for MSI and the exe does not extract an MSI).

We created an MSI wrapper that installs the exe. This app is installed during the build.

When the application is launched as a standard user or an admin user a UAC prompt appears:

'Do you want to allow the following program to make changes to this computer.

c:\windows\downloaded program files\F5ElHelper.exe" -rpc'

I saw this on the vendor website:


ElevationHelper process and Windows XP (CR91375)
Previously, in certain Windows XP configurations, the F5 process ElevationHelper (f5elhelper.exe), which is designed to elevate privileges on Windows Vista®, was starting, and causing connections to fail. Now, the ElevationHelper process no longer runs on Windows XP.


For standard users who enter their standard user credentials on the UAC prompt, the application launches as expected. Same for admin user. If the UAC prompt is ignored for a few seconds, the UAC prompt goes away and the application continues as expected.

I tried this on a vanilla Win 7 machine and there were no UAC prompts (even though I set UAC to highest seting). On this vanilla machine, if I add the standard account into the local admin group - the UAC prompt appears.

Another thing to add, If I add the vanilla machine to the domain so it recieves the machine assigned policies, the UAC prompt appears when the standard user is not in the admin group. This made me think it was a machine assigned policy that was the cause.

Has anyone seen anything similar with other apps, or have any ideas on the resolution?  Possibly something to do with 'Admin approval mode?'

Any suggesitons would be appreciated.


Answer Summary:
Create Shim using ACT and apply it using the command sdbinst
0 Comments   [ - ] Hide Comments


Please log in to comment

Community Chosen Answer



You have to create Shim using ACT and apply it using the command sdbinst

Answered 07/11/2012 by: jagadeish
Red Belt

  • http://blogs.msdn.com/b/chinmay_palei/archive/2011/01/16/windows-7-application-compatibility-issues-fix-centre.aspx
  • http://www.msigeek.com/4823/creating-a-shimfix-using-compatibility-administrator
Please log in to comment
Answer this question or Comment on this question for clarity



It is not recommended to apply a shim for UAC as it will apply it for the complete machine and not just for the application. Just take care of that.

Answered 07/13/2012 by: piyushnasa
Red Belt

Please log in to comment

Thanks for your replies. I raised this with the vendor and they have supplied me with a new executable. Hopefully this will work, if so I will reply with explanation.


Answered 08/15/2012 by: Meic
Second Degree Blue Belt

  • Hi Meic, We have the same issue... did the F5 supplied executable help? Have you been able to remove the UAC prompts? Please let me know...

    • Hi Seth, we received a new exe from the vendor and this did fix the problem. Cheers...
  • Meic, Would you be able to give me the F5 case numbers so I can reference when I open a case? This way support will be able to reference it and provide the fix sooner. Also are you using Firepass or APM and which version?

  • Hi Seth,

    I have moved on from the company I worked at so no longer have access to email to see references etc.

    What I do remember is that is was one of the options when you build\export the MSI from the console. The fix was to tick to install some driver as part of the f5 install. I do not remember what driver etc but hopefully that is enough information (there weren't that many options in the console)! Once we exported the MSI having ticked the driver it worked without UAC prompt.

    With regards to Firepass or APM - it was F5 Edge Client VPN.

Please log in to comment