Requesting elevation

Requesting elevation

A program can request elevation in a number of different ways. One way for program developers is to add a requestedPrivileges section to an XML document, known as the manifest, that is then embedded into the application. A manifest can specify dependencies, visual styles, and now the appropriate security context:

Setting the level attribute for requestedExecutionLevel to "asInvoker" will make the application run with the token that started it, "highestAvailable" will present a UAC prompt for administrators and run with the usual reduced privileges for standard users, and "requireAdministrator" will require elevation.^[16] In both highestAvailable and requireAdministrator modes, failure to provide confirmation results in the program not being launched.

An executable that is marked as "requireAdministrator" in its manifest cannot be started from a non-elevated process using CreateProcess(). Instead, ERROR_ELEVATION_REQUIRED will be returned. ShellExecute() or ShellExecuteEx() must be used instead. If an HWND is not supplied, then the dialog will show up as a blinking item in the taskbar.

Inspecting an executable's manifest to determine if it requires elevation is not recommended, as elevation may be required for other reasons (setup executables, application compatibility). However, it is possible to programmatically detect if an executable will require elevation by using CreateProcess() and setting the dwCreationFlags parameter to CREATE_SUSPENDED. If elevation is required, thenERROR_ELEVATION_REQUIRED will be returned.^[17] If elevation is not required, a success return code will be returned at which point you can use TerminateProcess() on the newly created, suspended process. This will not allow you to detect that an executable requires elevation if you are already executing in an elevated process, however.

Account Access

Account Access allows you to check your balance, perform trades, and update your account options and information with just a few clicks of your mouse.

Log in to your account, register, or learn more about the transactions available online, including receiving online statements and downloading your account information into Quicken and Money.

Account Suspended

Account Suspended

If your account is suspended, or temporarily unavailable, you will get a message at the top of the screen describing what is happening. If your account is temporarily unavailable, please wait for up to 2 hours before contacting the support team. If your account has been suspended, please fill out our support form for more information.

Serving Multiple Domains

Serving Multiple Domains

The main problem of serving multiple domains on one server is to provide access to accounts in different domains. To look for the specified Account, the server should get the name of the Domain to look in.
Access to Accounts is similar to E-mail delivery and Signal processing: the server needs to know the "full Account name" - an address in the accountName@domainName form.
There are several methods to pass the domain name to the server:

• A client application explicitly specifies the domain name.
  • If a user accesses the Server via the HTTP (Web interface), this happens automatically: the user first specifies the server URL (http://domainname:port), and then enters the Account name in the Login form.
    
    Since all modern browsers pass the original URL to the server, the domain name becomes known, and the HTTP module immediately appends that domain name to a simple user name specified in the Login form.
  • If a user accesses the Server using an XMPP, this happens automatically: the user first specifies the server name in the client application settings, and the client application sends that data as the 'to' attribute in the XML streams.
  • If users access the Server with POP or IMAP mailers, they can specify the full account name in the mailer "account name" settings.
    Since many mailers do not accept the @ symbol in account names, the % symbol can be used instead.
    The user john with an Account in the secondary Domain client1.com should specify the Account name as john%client1.com, not just as john.
  • If users access the Server with XIMSS client applications, these applications always specify the full Account name for the authentication operations.
• The domain name can be detected using multihoming. If it is impossible to force users to access the server via the Web interface or to make them enter full account names in their POP/IMAP mailers, multihoming can be used.
  A server is using multihoming if the server computer has more than one Internet (IP) address. Using the Domain Name System (DNS) the secondary domains can be assigned different IP addresses.
  If a secondary Domain has an IP address assigned to it, and a user connects to that IP address, all simple account names specified with the user mailer are processed as names in that Domain.
  It may be difficult to assign an IP address to each Domain, so this method should be used only if it is impossible to make users specify domain names explicitly.

These methods can be used together: a limited number of Domains can be served using dedicated additional IP addresses, while other Domains are served using explicit domain name specifications.

Access to Accounts

Access to Accounts

Every CommuniGate Pro Account can be accessed via the Access modules - POP, IMAP, XIMSS, WebUser Interface, FTP, XMPP, etc. Several client applications can use the same CommuniGate Pro Account at the same time, via the same, or different access modules.

Any Mailbox in any CommuniGate Pro Account can be shared: it can be accessed not only by the Account owner, but also by other users - if the Account owner or an Administrator grants those users access rights for that Mailbox.

Account Access

Account Access allows you to check your balance, perform trades, and update your account options and information with just a few clicks of your mouse.

Log in to your account, register, or learn more about the transactions available online, including receiving online statements and downloading your account information into Quicken and Money.

Access two Gmail accounts at once in the same browser

Access two Gmail accounts at once in the same browser

Thursday, August 05, 2010 | 11:21 AM

Posted by Macduff Hughes, Engineering Director

I have a couple different Gmail addresses that I use for different purposes. Historically, Google Accounts – including Gmail accounts — have only let people access one account at a time per browser, so using both accounts has been a bit inconvenient. I’ve either had to sign out and sign back in, use a second browser for my second account, or use a Chrome incognito window. And I'm not alone; lots of people have asked us for a better way to use multiple accounts at once in the same browser.

Now, you can visit google.com/accounts and click the link next to "Multiple sign-in." After you sign into your first account, you can sign in with up to two additional accounts from the new accounts menu in the upper right hand corner of Gmail, then easily toggle back and forth between them. You can even open multiple Gmail tabs — one for each of your accounts.