为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Non-admin users are still getting a UAC prompt for updates despite Maintenance Service being installed

  • 4 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 JDub

more options

Running 60.6.1esr (64-bit) on Windows Server 2012 R2, non-admin users are unable to install updates and are getting blocked by the UAC prompt. The Mozilla Maintenance Service is installed and is supposed to handle these updates (app.update.service.enabled=true).

From what I can tell, the update (and logs) are supposed to be in C:\ProgramData\Mozilla (which I can see on my personal non-ESR install), but that folder is not getting created on the problem machine, and the update is downloading to the local user's profile in AppData.

Are there any other options I can look for that would affect the functionality of the Maintenance Service?

Running 60.6.1esr (64-bit) on Windows Server 2012 R2, non-admin users are unable to install updates and are getting blocked by the UAC prompt. The Mozilla Maintenance Service is installed and is supposed to handle these updates (app.update.service.enabled=true). From what I can tell, the update (and logs) are supposed to be in C:\ProgramData\Mozilla (which I can see on my personal non-ESR install), but that folder is not getting created on the problem machine, and the update is downloading to the local user's profile in AppData. Are there any other options I can look for that would affect the functionality of the Maintenance Service?

被采纳的解决方案

One last follow-up for internet posterity. I discovered that the updater was able to successfully use the Maintenance Service on some accounts, but not the original account I was testing on. I believe that my predecessors had done some strange modifications of the ACLs for all services and the SCM in regards to the problem account, which I assume is what is throwing off the updater. Since the user accounts that will actually be running the updater in the wild aren't affected and work as expected, I'm going to count this as good enough for me.

EDIT: Further update in case it helps anyone later... The Mozilla Maintenance Service is getting created with a non-default ACL. Deleting the registry key with this ACL (HKLM\SYSTEM\CurrentControlSet\Services\MozillaMaintenance\Security) and rebooting will reset it back to the default, which allowed my problem users to update without getting the UAC prompt.

定位到答案原位置 👍 0

所有回复 (4)

more options

Did you try to reinstall the Mozilla Maintenance Service as a normal user?

  • maintenanceservice_installer.exe

Also check the update settings in Options/Preferences.

more options

I'm not sure what you mean. Normal users can't install software because they don't have admin privileges.

I have app.update.service.enabled=true in about:config, and "Use a background service to install updates" is checked in about:preferences.

more options

For completeness, I am seeing the same result on both 60.6.1esr and 66.0.3 (.exe and .msi).

I also tried running ProcMon when starting Firefox to see exactly what calls are being made, and at no point is maintenanceservice.exe ever read or executed before the UAC prompt is shown, so it's obvious that Firefox isn't even trying to use it.

more options

选择的解决方案

One last follow-up for internet posterity. I discovered that the updater was able to successfully use the Maintenance Service on some accounts, but not the original account I was testing on. I believe that my predecessors had done some strange modifications of the ACLs for all services and the SCM in regards to the problem account, which I assume is what is throwing off the updater. Since the user accounts that will actually be running the updater in the wild aren't affected and work as expected, I'm going to count this as good enough for me.

EDIT: Further update in case it helps anyone later... The Mozilla Maintenance Service is getting created with a non-default ACL. Deleting the registry key with this ACL (HKLM\SYSTEM\CurrentControlSet\Services\MozillaMaintenance\Security) and rebooting will reset it back to the default, which allowed my problem users to update without getting the UAC prompt.

由JDub于修改