Another Ad

Monday, April 2, 2012

Allow standard users to update UPS WorldShip

I have a user who uses UPS WorldShip 2012 daily. I didn't want to give the user local admin rights on the computer, but WorldShip updates automatically and it happens more than once a week. Those updates require admin privileges to run, so I did some digging to come up with a workaround. It turns out it's possible, and is pretty easy to setup.

First, run RegAccess.exe in the UPS install folder (the standard path is C:\UPS\WSTD\RegAccess.exe) using an account with admin rights on the machine. It only took a few seconds to run.

Next, you'll need to download the Microsoft Application Compatibility Toolkit, which you can get from here. You want the ApplicationCompatibilityToolkitSetup.exe file. Install that on the machine running WorldShip, and then start the Compatibility Administrator (32-bit) program with an admin account.

From here you'll want to check out this article for instructions on how to use the toolkit. For the name of the program to update, use runpatch.exe. The vendor is UPS (Or whatever you'd like. It doesn't really matter). For the program file location, find the runpatch.exe file in the UPS folder (default is C:\UPS\WSTD\runpatch.exe).

After you run through the setup to check the RunAsInvoker option, choose save as and it will ask you for the database name. This will be the name of the sdb file you need to import, and in their case they used uac-whitelist in the example. I saved my sdb file in the C:\UPS\WSTD folder to keep it all together, but you can save it wherever you'd like.

Once you have your sdb created, you'll need to open a command prompt running with admin rights. From there you can enter sdbinst C:\UPS\WSTD\uac-whitelist.sdb and press Enter. If you saved your file somewhere else, use your path instead, and the same for the sdb file name. That will import your sdb file into the system so you no longer need admin privileges in UPS WorldShip to update the program

4 comments:

Joakim said...

Yi and thanks for an excelent article about UPS WorldShip.

But would it be possible for you to attach the SDB file on your blog also? then we wouldnt be in need of running the ACT.

Thanks and best regards

crapecodefencer said...

What's the purpose of running RegAccess.exe?

rslygh said...

RegAccess.exe is supposed to assign full access to all users for the Worldship files. I thought this would solve my problem, but it wasn't enough. I'm not sure if has any bearing on fixing this problem so you can try skipping that step if you'd like and see if it makes a difference. I ran it during my attempts to make this work though, and since it did work in the end I left it as a required step.

Anonymous said...

New Worldship version 15 has no RUNPATCH.EXE file. Your fix worked on previous versions. Not sure what will happen on this one, I ran the REGACCESS.EXE.