主页 / server / 问题 / 1116849
Accepted
Nina G
Asked: 2022-11-29 14:13:36 +0800 CST

Microsoft .Net 运行时 UAC 每隔几分钟弹出一次 - 如何阻止它

  • 772

我有一个用户每隔几分钟就会被 UAC 提示有关Microsoft .Net Runtime请求管理员凭据的信息。每次用户点击No，UAC 会在几分钟后返回，如下所示：

在此处输入图像描述

我们的安全堆栈中没有任何内容被标记为恶意或阻止来自该用户设备的任何内容。但是，我确实找到了一些与UAC提示问题相关的日志。下面显示的是其中一个日志的输出：

[0B54:0AD4][2022-11-22T07:08:58]i001: Burn v3.14.0.5722, Windows v10.0 (Build 19044: Service Pack 0), path: C:\Users\User~1\AppData\Local\Temp\{85268AAC-6881-41DB-85FA-9DF8936C33C0}\.cr\DNCR605-KB4054530-x64-AllOS-ENU.exe
[0B54:0AD4][2022-11-22T07:08:58]i000: Initializing string variable 'BUNDLEMONIKER' to value 'Microsoft .NET Runtime - 6.0.9 (x64)'
[0B54:0AD4][2022-11-22T07:08:58]i000: Initializing string variable 'PRODUCT_NAME' to value 'Microsoft .NET Runtime - 6.0.9 (x64)'
[0B54:0AD4][2022-11-22T07:08:58]i000: Initializing string variable 'LINK_PREREQ_PAGE' to value 'https://go.microsoft.com/fwlink/?linkid=846817'
[0B54:0AD4][2022-11-22T07:08:58]i009: Command Line: '-burn.clean.room=C:\Users\User\AppData\Local\Temp\SupportAssistAgent\AutoUpdate\DNCR605-KB4054530-x64-AllOS-ENU.exe -burn.filehandle.attached=556 -burn.filehandle.self=572 /q /norestart'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\User\AppData\Local\Temp\SupportAssistAgent\AutoUpdate\DNCR605-KB4054530-x64-AllOS-ENU.exe'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\User\AppData\Local\Temp\SupportAssistAgent\AutoUpdate\'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858.log'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleName' to value 'Microsoft .NET Runtime - 6.0.9 (x64)'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[0B54:2CE4][2022-11-22T07:08:58]i000: Setting numeric variable 'WixStdBALanguageId' to value 1033
[0B54:2CE4][2022-11-22T07:08:58]i000: Setting version variable 'WixBundleFileVersion' to value '6.0.9.31619'
[0B54:0AD4][2022-11-22T07:08:58]i100: Detect begin, 3 packages
[0B54:0AD4][2022-11-22T07:08:58]i101: Detected package: dotnet_runtime_6.0.9_win_x64.msi, state: Absent, cached: None
[0B54:0AD4][2022-11-22T07:08:58]i101: Detected package: dotnet_hostfxr_6.0.9_win_x64.msi, state: Absent, cached: None
[0B54:0AD4][2022-11-22T07:08:58]i101: Detected package: dotnet_host_6.0.9_win_x64.msi, state: Absent, cached: None
[0B54:0AD4][2022-11-22T07:08:58]i052: Condition '((VersionNT > v6.1) OR (VersionNT = v6.1 AND ServicePackLevel >= 1))' evaluates to true.
[0B54:0AD4][2022-11-22T07:08:58]i052: Condition 'VersionNT64' evaluates to true.
[0B54:0AD4][2022-11-22T07:08:58]i199: Detect complete, result: 0x0
[0B54:0AD4][2022-11-22T07:08:58]i200: Plan begin, 3 packages, action: Install
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleRollbackLog_dotnet_runtime_6.0.9_win_x64.msi' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858_000_dotnet_runtime_6.0.9_win_x64.msi_rollback.log'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleLog_dotnet_runtime_6.0.9_win_x64.msi' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858_000_dotnet_runtime_6.0.9_win_x64.msi.log'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleRollbackLog_dotnet_hostfxr_6.0.9_win_x64.msi' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858_001_dotnet_hostfxr_6.0.9_win_x64.msi_rollback.log'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleLog_dotnet_hostfxr_6.0.9_win_x64.msi' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858_001_dotnet_hostfxr_6.0.9_win_x64.msi.log'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleRollbackLog_dotnet_host_6.0.9_win_x64.msi' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858_002_dotnet_host_6.0.9_win_x64.msi_rollback.log'
[0B54:0AD4][2022-11-22T07:08:58]i000: Setting string variable 'WixBundleLog_dotnet_host_6.0.9_win_x64.msi' to value 'C:\Users\User~1\AppData\Local\Temp\Microsoft_.NET_Runtime_-_6.0.9_(x64)_20221122070858_002_dotnet_host_6.0.9_win_x64.msi.log'
[0B54:0AD4][2022-11-22T07:08:58]i201: Planned package: dotnet_runtime_6.0.9_win_x64.msi, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[0B54:0AD4][2022-11-22T07:08:58]i201: Planned package: dotnet_hostfxr_6.0.9_win_x64.msi, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[0B54:0AD4][2022-11-22T07:08:58]i201: Planned package: dotnet_host_6.0.9_win_x64.msi, state: Absent, default requested: Present, ba requested: Present, execute: Install, rollback: Uninstall, cache: Yes, uncache: No, dependency: Register
[0B54:0AD4][2022-11-22T07:08:58]i299: Plan complete, result: 0x0
[0B54:0AD4][2022-11-22T07:08:58]i300: Apply begin
[0B54:0AD4][2022-11-22T07:08:58]i010: Launching elevated engine process.

从上面看，似乎正在尝试自动更新任务。为了完成它，它需要更高的权限。但是，如果用户单击No它应该结束。

谁能帮助阻止 UAC 不断提示？

update

2 个回答

  1. Best Answer

    日志中的“C:\Users\User\AppData\Local\Temp\SupportAssistAgent\AutoUpdate”表示您的机器上的某些东西正在推送 ASP.NET Core 运行时的更新，这是超自然的，因为该运行时每月更新一次 (6.0. 11是最新的）来解决安全漏洞。

    与您的域/机器管理员交谈，因为在这种情况下，他们是您应该求助的唯一资源。

    • 0

  2. 条条大路通 - 您需要 PC 的管理员权限才能解决此问题。

    正如 Lex 所提到的，dotnet 更新由 SupportAssistAgent 调用，它是 Dell Support Assistant。禁用服务或卸载软件应该停止提示。

    但是 - 如果您是这些用户的管理员，您如何处理硬件（驱动程序和固件）更新和 Windows 更新？

    您（作为管理员）有什么理由无法安装它要求的 dotnet 更新？这也将阻止提示返回:-)

    • 0

相关问题