wesneon

I am performing the following steps for the Certified for Windows Vista Test Case 20

7.Open AppVerifier
8.Attach application¡¯s main executable to AppVerifier including
a.Check the LuaPriv check
9.Launch the application
10.View application¡¯s main executable AppVerifier log
a.Search log for LuaPriv (Simpilest way to search is to search for ¡°Severity=¡±Error¡±¡±)

I'm working on isolating the cause of the following App Verifier error generated when launching my app:

OpenFileMappingW: Section
(\Sessions\2\BaseNamedObjects\windows_shell_global_counters)
only grants requested 'READ_CONTROL' to 'NT AUTHORITY\SYSTEM'

Has anyone encounter a similar error and successfully tracked down the function or dll that generated it I have found that various MS dlls and functions generate App Verifier error messages.

Also, if someone can point me to documentation about what a global shell counter is, I'd appreciate it, my web searches have not turned up much.

Thanks.

Wes



Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Oliver Lundt - MSFT

The purpose of TC20 is to test your installer exe and msi for accessing WRP files.

It sounds like you are launching your application "generated when launching my app"

TC31 is what AppVerifier will watch on your application. If you application actauly tries to replace or overwrite a WRP file it will crash. For an installer Vista is forced to lie so your installer doesn't crash. This is a midigation in Vista for compatibility. Relying on a midigation isn't good, there for the test case in certification.

That said not all error do you need to concern your self with. Make sure you check the location is actualy WRP protected. One way to tell is it has TrustedInstaller permission then it is.




Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

erbere

I have the same problem but still no solution. I have another thread talking about this but it was left unanswered. Mayby someone from Microsoft should answer this or at least redirect us to the solution!




Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Alexander1985

Hello.

As I've understood some types of error are not critical for passing TC20. Could You please help me to decide if this test-case passed or failed I got the following types of error:

<avrf:message>Access was restricted to trusted users only.</avrf:message> 
<avrf:formatmessage>OpenFileMappingW: Section (\Sessions\1\BaseNamedObjects\windows_shell_global_counters) only grants requested 'READ_CONTROL' to 'NT AUTHORITY\SYSTEM'</avrf:formatmessage>

<avrf:message>The application performed a hard administrator check.</avrf:message> 
<avrf:formatmessage>Called CheckTokenMembership against trusted entity 'NT AUTHORITY\SYSTEM' (not present)</avrf:formatmessage>

<avrf:message>Access was restricted to trusted users only.</avrf:message> 
<avrf:formatmessage>CreateFileW: File (\Device\NamedPipe\wkssvc) only grants requested 'FILE_APPEND_DATA' to 'NT AUTHORITY\SYSTEM, NT AUTHORITY\LOCAL SERVICE'</avrf:formatmessage> (Could it be because of the installer executable doesn't have an execution level in manifest )

<avrf:message>Access was restricted to trusted users only.</avrf:message> 
<avrf:formatmessage>CreateFileW: File (\Device\NamedPipe\lsass) only grants requested 'FILE_APPEND_DATA' to 'BUILTIN\Administrators'</avrf:formatmessage>

<avrf:message>Requested a security-relevant privilege.</avrf:message> 
<avrf:formatmessage>Privs: Requested SeShutdownPrivilege (the "Shut down the system" privilege) with NtAdjustPrivilegesToken successfully</avrf:formatmessage> (there are a lot of messages of this type with different privileges)

<avrf:message>The application performed a hard administrator check.</avrf:message> 
<avrf:formatmessage>Called CheckTokenMembership against trusted entity 'BUILTIN\Administrators' (present)</avrf:formatmessage>

<avrf:message>Access was restricted to trusted users only.</avrf:message> 
<avrf:formatmessage>OpenFileMappingW: Section (\Sessions\1\BaseNamedObjects\windows_shell_global_counters) only grants requested 'READ_CONTROL' to 'NT AUTHORITY\SYSTEM'</avrf:formatmessage>

The purpose of TC20 is to test your installer exe and msi for accessing WRP files. If you application actauly tries to replace or overwrite a WRP file it will crash.

Are You sure about that For what reason the following steps are included in TC20 then

7.       Open AppVerifier 3.22

8.       Attach application¡¯s main executable to AppVerifier including

a.       Check the LuaPriv check

9.       Launch the application

10.       View application¡¯s main executable AppVerifier log

a.       Search log for LuaPriv

11.       For each LuaPriv Error:

a.       Check Error to ensure the application did not attempt to write to or replace any WRP Registry Key or Windows System File at first run.

b.       Make note of any WRP Registry Key or Windows System File that the application attempted to write to or replace.

12.       Make note of any WRP dialogs that appeared during application runtime.

 

 

Thanks.





Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Igor Mendizabal

Hello,

I guess it's not of much help, but I'm going crazy with this test case too.

I was having problems with our main installation, and I read that you shouldn't install system DLLs in Windows Vista because they are already shipped with Vista. So I made a new installation with only one file in it, no system files, no merge modules, and that file was a propietary OCX control of our own. Well, I performed Test Case 20, and I got around 1700 errrors of various kinds.

I could, perhaps, go through these errors, but considering that we distribute around 800 OCX made by us in our main application, I don't think that method would be very practical. Besides, we need to distribute other third party files, necessary for our app to run.

I also wrote about this problem to an e-mail address where there's supposed to be people helping certified partners preparing their application to get certified, but still no answer. I'll post it here if I get something.

Thank you very much,

Igor Mendizabal






Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Bhall

Try this application I wrote, it runs through the errors and identifies if any are wrp violations.

it can be downloaded here.

http://www.dthall.com/wrp.html





Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

yarixx

Our results of .msi testing (Application Verifier) contain the following error:

...
- <avrf:logEntry Time="2007-09-14 : 10:53:15" LayerName="LuaPriv" StopCode="0x331B" Severity="Error">
<avrf:message>Access was restricted to trusted users only.</avrf:message>
<avrf:formatmessage>OpenProcess: Process (pid 0x00000d44) only grants requested 'PROCESS_VM_READ' to 'NT AUTHORITY\SYSTEM, BUILTIN\Administrators'</avrf:formatmessage>
<avrfarameter1>6d84117c - Object Type</avrfarameter1>
<avrfarameter2>ef500 - Object Name</avrfarameter2>
<avrfarameter3>6d842cc4 - Access Mask</avrfarameter3>
<avrfarameter4>db5f68 - String SID</avrfarameter4>
...
- <avrf:logEntry Time="2007-09-14 : 10:53:15" LayerName="LuaPriv" StopCode="0x331B" Severity="Error">
<avrf:message>Access was restricted to trusted users only.</avrf:message>
<avrf:formatmessage>OpenFileMappingW: Section (\Sessions\1\BaseNamedObjects\windows_shell_global_counters) only grants requested 'READ_CONTROL' to 'NT AUTHORITY\SYSTEM'</avrf:formatmessage>
<avrfarameter1>6d841174 - Object Type</avrfarameter1>
<avrfarameter2>db5ee8 - Object Name</avrfarameter2>
<avrfarameter3>6d8420c4 - Access Mask</avrfarameter3>
<avrfarameter4>da1158 - String SID</avrfarameter4>
...

There is this error, even if we create new empty project with Wise Installer!

And even more!!! This error occurred when we tested MicroSoft Excel.msi:
<avrf:logEntry Time="2007-09-25 : 16:47:41" LayerName="LuaPriv" StopCode="0x331B" Severity="Error">

Can you help us to solve this problem
Does this error occurs over our incorrect operation or is it the problem of .msi generating software

We use:
- for .msi generating: "Wise Installation Studio";
- for .msi testing and editing: "Orca.exe".

Thanks!





Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Bruce N. Baker - MSFT

I think many people are missing stuff here.

Not all errors are problems. Please see this post in identifying WRP keys, etc.

http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=1836906&SiteID=1

Also, try Bhall's tool to indentify keys as well. I personally haven't tried it yet but it might save you some time.






Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

yarixx

We followed http://www.dthall.com/wrp.html link and installed the application. We tested the log generated with Application Verifier (passing Test Case 20).
As the result we have: errors WRP = 0 ( both "to write to WRP Registry Keys or replace any system files during install" and "write to WRP Registry Keys or replace any system files during execution of common operations")

So the question is: do we have any critical errors for passing the Test Case 20 or not




Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Bruce N. Baker - MSFT

If you have any errors for TC20 you need to evaluate them and verify that the key or resource is not a WRP resource. If you feel that they are NOT a wrp resource then you are ok. You can use pre-certification as your final check before you submit to final certification tests for Vista.






Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

yarixx

Could you please give us some more information about pre-certification

Thanks!




Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Bruce N. Baker - MSFT

I'm sorry. I must correct my previous post.

There is no "Pre-Certification" now. There was an 'early adopter" style program that ended last summer.

The only pre anything is called "PreTesting" is done by the company that is submitting the application, ie: Yourself using the 32 test cases.

I have internal mail on this to verify and if I find an option I will update this thread but I'm pretty sure the program is completed.






Re: Application Compatibility for Windows Vista TC 20 - App Verifier error messages

Bruce N. Baker - MSFT

Verified. The pre-certification is done by the partner/vendor. Then you submit and it gets sent to the testing authority.

Use winqual.microsoft.com for submissions and submission information