Running and Troubleshooting Applications

13
Running and Troubleshooting

Applications
Section Topics
Application Compatibility Tools
Windows 7 File and Registry Virtualization
Windows Virtual PC with XP Mode
Administering and Maintaining W Windows

indows 7
13-1

Global Knowledge Training

LLC
L

Running and Troubleshooting Applications
Section Objectives
After completing this section, you will be able to:
Describe the purpose of each of the Application Compatibility Tools

Describe the UAC settings for applications
Describe the purpose of the Windows Virtual PC with XP mode
Explain how to use the Windows Virtual PC with XP mode
Section Overview
An operating system is only as good as the applications that it can run. A new operating system
that cannot run the applications that make you productive is an operating system that does nothing
for your business. Windows 7, like Windows Vista, takes into account the usefulness and
compatibility of applications. This section introduces the Windows 7 tools and other stand-alone
utilities used for application compatibility, remediation, and mitigation.
13-2
Administering
Adminnistering
and Maintaining Windows 7

Global
Gloobal Knowledge Training LLC L
LL

Application Compatibility Tools
Figure 433: Application Compatibility Tools
You can use the Windows 7 application compatibility tools to quickly and temporarily bring an
application into compatibility. The tools adjust the environment variable of the Windows 7
computer to emulate another environment such as Windows XP or Windows 2000.
Following is a description of the tools that are available for application compatibility in
Windows 7.
Figure 433 lists the subjects described in this topic.
Program Compatibility Wizard
Figure 434: Program Compatibility Wizard
The Program Compatibility Wizard is located in the Programs category of Windows 7 Control
Panel. To run the wizard, click the Run programs made for previous versions of Windows link.
The wizard guides you through the simple process of configuring your incompatible application to
function.

indows 7
13-3

Global Knowledge Training L

LLC

Figure 435: Program Compatibility Wizard (cont.)
The first step in using the Program Compatibility Wizard is to choose the application that has
trouble running on Windows 7.
You can let Windows choose compatibility options for you by selecting the Try Recommended
Settings option. For more control, you can select the Troubleshoot Program option and answer a
series of questions about the problems you are having with the program.
13-4
Administering
Adminnistering

Global
LL

When you select the manual method, you must choose the Windows environment that the
application was originally intended for. For instance, if the application was designed for
Windows XP, then choose the compatibility mode for Windows XP (SP 2). This adjusts the
default Windows 7 environment to emulate the Windows XP environment as best it can. Once the
wizard changes the settings, leave the wizard open and run the application using the new settings.
If the application runs, then complete the final steps of the wizard and solidify the environment
settings as they pertain to the application.
Helpful Hint
Selecting the Troubleshoot program option and manually
troubleshooting does not change the security of the Windows 7
environment at all. You are not violating anything that Windows 7
deems a risk, so the wizard might fail to produce the desired results.

indows 7
13-5


LLC

Compatibility Tab
Figure 438: Compatibility Tab
The Compatibility tab is available in the properties dialog of a program or shortcut. All of the
settings that are configured in the Program Compatibility Wizard are actually reflected here. To
set the compatibility options more quickly, you can go directly to the Compatibility tab and set
the options manually.
Standard User Analyzer
Figure 439: Standard User Analyzer
The SUA (Standard User Analyzer) tool enables you to test your applications and to monitor API
requests to detect potential compatibility issues due to the UAC feature in both Windows Vista
and Windows 7. UAC requires all users, including administrators, to operate as standard users
until the application is elevated by acknowledging the UAC prompt. Not all applications can run
properly with the Standard User role if the application requires access and privileges that are
unavailable to a standard user.
13-6
Administering
Adminnistering

Global
LL

Figure 440: Standard User Analyzer
You can use other tools to help you to discover issues with applications before they are
implemented, which can fix the problematic applications.
The SUA is a tool that tests the performance of an application under the strict guidelines of a
standard user. Remember, Windows Vista and Windows 7 require that all users, regardless of
group affiliation, interact with the operating system as a standard user. For security purposes,
some programs require interaction with the Windows platform by an administrator. The Windows
7 platform limits the use of administrative privileges by default. The SUA attempts to mitigate
problems before they are experienced in a live situation.
The tool analyzes your application during the installation and transparently records a log of what
action is taking place during the installation process. The tool generates a detailed report showing
what the program is attempting to access. Hard access can be defined as file system access in the
context of the administrator.
While the SUA does not repair any of the problems that it finds, it gives the administrator the
information required to avoid any issues during the application compatibility testing phase of the
Windows 7 migration.

indows 7
13-7


LLC

Figure 441: Standard User Analyzer (cont.)
To use the Standard User Analyzer, follow these steps:

1. Install the analyzer.
2. Select the application that you want the analyzer to check for issues.
3. Execute or run the application.
4. Close the application.
5. View the analysis details provided by the Standard User Analyzer.
6. Apply any application mitigations that were developed.
7. Repeat the process, if necessary.
8. If the issue is not resolved after applying all mitigations, run the application as an
administrator.
During the run time, the analyzer logs the events. If the application functioned correctly, the
analyzer closes. If the tool notices issues during the run time, it records the issues in a report. At
this point, you apply the application mitigations that have been developed and run the process
again. Repeat this process until the problems are fixed or you run out of options. If you exhaust all
mitigations, you can either not use the program with Windows 7 or configure it to run with
administrative privileges.
13-8
Administering
Adminnistering

Global
LL

Windows Application Compatibility Toolkit
Figure 442: Application Compatibility Toolkit
The Standard User Analyzer is available as a single download or as part of the ACT (Application
Compatibility Toolkit) version 5.5. The ACT version 5.5 provides a suite of application tools such
as the Compatibility Administrator, Application Compatibility Manager, Internet Explorer
Compatibility Test Tool, Setup Analysis tool, Standard User Analyzer wizard, and the Standard
User Analyzer tool. These tools can help you during your application-testing phase, and you can
download them for free.
For these tools to function properly, ensure that you have the proper user context and access to run
them. The tools let you know if you do not have the proper permissions. For all of the tool features
to function properly, you have to log on to your Windows computer with administrative privileges
or rights.

indows 7
13-9


LLC

Compatibility Administrator
Figure 443: Compatibility Administrator
You can use the Windows Compatibility Administrator tool to repair an application that is
experiencing problems with Windows Vista or Windows 7. You can adjust the environment
variable settings for an application to ease the requirements for run-time functionality. The tool
contains a database of thousands of patches and fixes for some popular applications. You need
more than just a basic understanding of development and application packaging to productively
use this tool.
Figure 444: Compatibility Administrator (cont.)
Many compatibility fixes are available to make your program mitigations more straightforward.
These fixes provide detail on the issues resolved, such as registry and file system permissions that
you can use to resolve specific compatibility issues.
13-10
Administering
Adminnistering

Global
LL

Figure 445: Compatibility Administrator (cont.)
With the new database tool, if an application, such as an in-house application, does not have a fix
already in the database, you can create your own. You can choose from three new objects types to
pair with the database. As shown in Figure 445, the three new objects are Application Fix,
Apphelp Message, and Compatibility Mode. You can also add the application in question to the
database and create these fixes for it.

indows 7
13-11


LLC

Application Compatibility Manager
Figure 446: Application Compatibility Manager
Using the ACM (Application Compatibility Manager) tool, you can collect data and analyze your
environment, so that you can resolve issues prior to deploying a new operating system in your
organization.
Figure 447: Application Compatibility Manager (cont.)
The basic ACM functionality is quite important. You can use the tool to navigate around the
network and gather information about Windows XP SP2 or SP3, Windows Vista, Windows Vista
SP1 or SP2, and Windows 7 computers. The Application Compatibility reports show the installed
applications, the application packages, and the computers and other devices that are under each of
the operating system categories. Along with this information, the reports also list any
compatibility issues that exist under each operating system.
13-12
Administering
Adminnistering

Global
LL

Windows 7 File and Registry Virtualization
Figure 448: Windows 7 File and Registry Virtualization Process
Windows Vista introduced a new method of executing and managing applications. This method,
called Windows file and registry virtualization, still applies to the Windows 7 operating system.
Following is a description o f the Windows 7 file and registry virtualization process for application
compatibility and security. Figure 448 lists the subjects described in this topic.

indows 7
13-13


LLC

File and Registry Virtualization Process
Figure 449: File and Registry Virtualization Process
Several things happen when you install an application. The program needs to set itself up in two
main locations, the registry and the Program Files group. Unfortunately, when the application has
problems, these locations are left vulnerable to corruption. The file and registry virtualization
method limits the effects of an application corruption issue.
With the file registry and virtualization feature, when a user installs an application, the installation
process creates a virtual store. This virtual store contains all of the typical installation files and a
copy of the appropriate registry location instead of writing to the live registry and file system. The
theory is simple: if the application crashes or becomes compromised with a virus, a bad macro, or
a driver, then the virtual store becomes corrupt. This action preserves the integrity of the live
registry and the Program Files group. Figure 449 shows the file and registry virtualization process
flow during the read and write phases. Notice the behavior during the write phase. If users have
the appropriate permissions, they can write to the Program Files group. Therefore, the local
administrator has access to the live locations as well as the virtualized locations.
13-14
Administering
Adminnistering

Global
LL

Virtual Store
Figure 450: Virtual Store
File and registry virtualization is a feature of the UAC that protects the registry and the Program
Files group from being manipulated by applications that standard users install or run in the context
of their standard user accounts.
The process works in a simple method. When an application attempts something that is considered
dangerous, for example write to an .ini file such as c:\program files\BadApp\options.ini,
Windows detects that the users privileges do not allow him or her to write to that location.
Instead, the file and registry process copies options.ini to
c:\users\yourAccouneName\AppData\Local|VirtualStore\Program Files\
BadApp\Options.ini. The file and registry virtualization process then lets the modification
proceed.
The same process happens for the registry values associated with the
HKEY_LOCAL_MACHINE registry hive. By protecting these two volatile locations, the
Program Files group and the HKEY_LOCAL_MACHINE registry hive, the process, hopefully,
keeps your machine more stable over its usage.

indows 7
13-15


LLC

Figure 451: Virtual Store (cont.)
When the UAC protected and managed application runs, it runs safely in the virtual store. In this
location, the applications process can safely manipulate a copy of the protected files. Running the
older application from this protected location maintains the security of the Windows 7 operating
system.
You can turn off the file and registry virtualization within the UAC policy settings under the local
security policy.
Policy Options for File and Registry Virtualization
Figure 452: Policy Options for File and Registry Virtualization
File and registry virtualization is a function of the UAC mechanism that is part of the local
security policy of a computer. Access the UAC locations by navigating to the LSP location and
follow the path: Local Policies/Security Options. Enable or disable the file and registry
virtualization process by clicking the UAC security setting in the list, User Account Control:
Virtualize file and registry write failures to per-user locations.
13-16
Administering
Adminnistering

Global
LL

Helpful Hint
File and registry virtualization is a powerful tool that helps you to
maintain the stability of your Windows 7 desktops and their
applications. A best practice is to leave it enabled.
Figure 452 shows several other UAC features that pertain to UIAccess applications and their
efficient operation. One of these is the User Account Control: Allow UIAccess applications to
prompt for elevation without using the secure desktop setting. For User Interface Accessibility
applications, it automatically disables the dim secure desktop during the initialization period.
Some types of applications are unable to function with the secure desktop. This configuration
turns off the secure desktop for User Interface Accessibility applications, such as the Windows
Remote Assistance.
The Detect application installations and prompt for elevation UAC setting controls whether
users can install applications on their desktops. This configuration requires that users have
administrative privileges during the installation process. If users do not have administrative
privileges, the installation does not start.
Helpful Hint
Applications that do not require administrative privileges install
regardless of this setting.
The User Account Control: Only elevate executables that are signed and validated setting
further controls application installations. This option configures the application installation and
execution permissions with the use of a PKI. It partners the application with a code-signing
certificate generated by a CA. You simply add these certificates to the Trusted Publishers
certificate store on the users local computers. If a valid certificate exists in the Trusted Publishers
certificate store for an application, then the application completes the installation and runs
successfully on the device.
Note
Troubleshooting applications involved with this type of environment
can be difficult without a working knowledge of the PKI in place at your
business.
The User Account Control: Only elevate UIAccess applications that are installed in secure
locations setting. UIAccess applications that are not located in one of the systems secure locations
cannot launch. The default secure locations include:
Program Files folder (includes all sub-folders )

System32 folder
Program Files (x86) folder (includes all 64-bit versions sub-folders)

indows 7
13-17


LLC

Windows Virtual PC with XP Mode
Figure 453: Windows Virtual PC with XP Mode
Occasionally, you may find applications that do not function on a new operating system, or do not
run in any compatibility mode. A possible solution to the problem is to run the application on its
intended operating system. This is possible due to virtual technologies that can assist you with this
problem. The Microsoft Virtual PC platform runs applications not designed for Windows 7. Using
Microsoft Virtual PC, a single computer can perform all of this.
Figure 453 lists the subjects described in this topic.
13-18
Administering
Adminnistering

Global
LL

Windows 7 Virtual PC Features
Figure 454: Windows 7 Virtual PC Features
The issue with running virtualized applications on the desktop is that the user has to log on to one
desktop for his or her new features and then log onto the other virtual desktop to run the legacy
applications. This is an unpleasant task for some users, because it is easy for them to become
confused regarding which desktop is currently in use.
Windows 7 provides the use of Virtual PC technology with one major improvement. Users do not
have to log on to another desktop to use Windows XP-based applications. The new Windows
Virtual PC with XP Mode, a free download for Windows 7 users, is a tool that contains a
Windows XP virtual machine you can open and log on to. For any applications that do not
function on Windows 7, install them directly on the Windows XP virtual machine. Once you
finish and log off the Windows XP virtual machine, you can access the applications from the
Windows 7 programs list as if they were installed on the Windows 7 machine. Users do not need
to switch back and forth to use the applications. This eases user confusion, which reduces the
number of help desk calls and increases productivity.

indows 7
13-19


LLC

Creating a New Virtual Machine
Figure 455: Creating a New Virtual Machine
When the Virtual PC application installation is complete and the Windows XP Mode virtual
machine from Microsoft is downloaded, the Windows XP Mode virtual machine automatically
registers with Virtual PC. Additional virtual machines can be created in Windows Virtual PC so
that you can run other operating systems as well.
To create a new virtual machine, click Start, All Programs, Windows Virtual PC, and then click
Windows Virtual PC. In the Virtual Machines window, click the Create Virtual Machine
button.
13-20
Administering
Adminnistering

Global
LL

Modifying Existing Virtual Machine Settings
Figure 456: Modifying Existing Virtual Machine Settings
Using the Virtual PC, you can adjust the virtual machine settings such as the memory used and the
network setting for the network interface card and for the hard drives. Remember to also enable
the virtual machine integration features, which make the physical hardware and the virtual
operating system work more smoothly and efficiently together.
The requirements for Microsoft Virtual PC are as follows:
Windows 7 RC1 or newer

Hardware assisted virtualization (Intel VT or AMD-V technology)
Hardware-assisted virtualization settings are configured within the BIOS and vary
between manufacturers
Users that access the VM must be members of the administrators group or the remote
desktop users group
The virtual machine integration features enable the following:
Windows Clipboard
USB device support
Printing
Physical hard drive availability
Mouse movement between the host machine and the virtual machine seamlessly

indows 7
13-21


LLC

To publish virtual applications from a guest operating system to the Windows 7 host, your guest
operating system must be one of the following:
Windows XP Professional SP 3
Windows Vista Enterprise
Windows Vista Ultimate
Windows 7 Enterprise
Windows 7 Ultimate
Installing Windows XP Mode
Figure 457: Installing Windows XP Mode
Windows XP Mode is a free copy of Windows XP prepackaged inside a virtual machine. You can
download this VM from Microsoft and run it free of charge as long as you own Windows 7.
After you meet all of the prerequisites, it should be very easy to build your environment. Start the
Windows XP Mode virtual machine and install your applications. If your installation does not
create a shortcut, you need to create a shortcut from the application install folder to the All Users
Start Menu folder. You can now turn off (not hibernate) the Windows XP virtual machine. The
user should now be able to find the virtualized applications within his or her Program Files group
on the Windows 7 machine.
13-22
Administering
Adminnistering

Global
LL

Launching Windows XP Mode
Figure 458: Launching Windows XP Mode
Launching Windows XP mode launches a virtual machine that Windows XP is installed in. If the
VM was running previously, it resumes from a saved state.
Figure 459: Launching Windows XP Mode (cont.)
After launching Windows XP Mode, the VM appears inside a window on the local Windows 7
desktop. You may interact with Windows XP normally, by using the mouse and the keyboard.
You can also take Windows XP Mode into and out of full screen mode by using the Action menu,
or by pressing the CTRL+ALT+PAUSE key sequence.

indows 7
13-23


LLC

Windows XP Mode Program Integration
Figure 460: Windows XP Mode Program Integration
Install any applications that you cannot run on Windows 7 inside the Windows XP Mode virtual
machine. Once the application is installed, it actually appears as a shortcut on the Windows 7
Start menu. When you launch the application from the Windows 7 shortcut, the application
launches in a single window all by itself. It does not appear like it is running inside a VM, even
though the VM is really running in the background.
13-24
Administering
Adminnistering

Global
LL

Acronyms
The following acronyms are used in this section:
ACM Application Compatibility Manager

ACT Application Compatibility Toolkit
AMD Advanced Micro Devices
API application programming interface
BIOS basic input/output system
CA certification authority
LSP Local security policy
MB megabyte
PC personal computer
PKI public key infrastructure
RC Release Candidate
SP2 Service Pack 2
SP3 Service Pack 3
SUA Standard User Analyzer
UAC User Account Control
UIA User Interface Accessibility
USB Universal Serial Bus
VM virtual machine
VT virtualization technology

indows 7
13-25


LLC
L

Section Review
Summary
You use the following Windows 7 application compatibility tools to quickly and
temporarily bring an application into compatibility:
The Program Compatibility Wizard: Use this step-by-step process to help you
configure your incompatible application to run on Windows 7.
Compatibility tab: Use this tool to manually change the compatibility settings in
the Properties dialog box of the application.
Standard User Analyzer: Use the SUA tool to test an application and to see how
it performs under the strict standard user guidelines.
Windows Application Compatibility Toolkit 5.5: Use this free suite of
application tools during the application-testing phase. In addition to the SUA tool,
the ACT contains the Compatibility Administrator, Application Compatibility
Manager, Internet Explorer Compatibility Test Tool, and Setup Analysis Tool
Several UAC features exist within the local security policies that pertain to UIAccess
applications and their efficient operation:
Virtualize file and registry write failures to per-user locations: Enables the file
and registry virtualization process.
Allow UIAccess applications to prompt for elevation without using the secure
desktop: Disables the dim secure desktop for User Interfaces Applications, such
as Windows Remote Assistance.
Detect application installations and prompt for elevation: Enables only users
with administrative privileges to install applications on their desktops.
Only elevate executables that are signed and validated: Allows applications to
install only if a valid certificate exists in the Trusted Publishers certificate store for
an application.
Only elevate UIAccess applications that are installed in secure locations:
Enables or disables the launch of UIAccess applications that are not located in a
secure location.
Windows Virtual PC with XP mode launches legacy applications in older versions of
Windows inside a VM.
Before you can use the Windows Virtual PC with XP mode, you must download and
install the free copy of the Virtual PC application and the Windows XP mode virtual
machine. Once you install the free downloads, you can open the Windows XP mode
VM and install any applications that cannot run on Windows 7 inside the VM.
Installing an application in the Windows XP VM creates a shortcut on the Windows 7
Start menu. After installation, you can open an incompatible application in the VM by
clicking on the shortcut in the Windows 7 Start menu.
13-26
Administering
Adminnistering

Global
LL

Knowledge Check
1. Can you turn off the Windows file and registry virtualization within the Windows plan?
2. Can you use the Windows Virtual PC with XP Mode on 64-bit systems?
3. List two different methods used to modify application compatibility settings.
4. Using the Standard User Analyzer tool, you can manipulate the local security policies that pertain
to User Interface applications.
a. True
b. False
5. Which of the following tools are components of the Application Compatibility Toolkit v 5.5?
(Choose all that apply.)
a. Internet Explorer Compatibility Test tool
b. Compatibility Administrator
c. Compatibility tab
d. Setup Analysis tool
e. Standard User Analyzer

indows 7
13-27


LLC
L

6. List some of the features of Windows Virtual PC with XP Mode.
13-28
Administering
Adminnistering

Global
LL

Knowledge Check Answer Key

The correct answers to the Knowledge Check questions are bolded.
1. Can you turn off the Windows file and registry virtualization within the Windows schema?
No, file and registry virtualization is turned off within the local security policy, but of course
it is not recommended that you actually do that.
2. Can you use the Windows Virtual PC with XP Mode on 64-bit systems?
Yes, as long as you download the 64-bit edition of the Virtual PC application and the
Windows XP Mode virtual machine.
3. List two different methods used to modify application compatibility settings.
Program Compatibility Wizard
Compatibility tab in the properties dialog box of an application or shortcut
4. Using the Standard User Analyzer tool, you can manipulate the local security policies that pertain
to User Interface applications.
a. True
b. False
You use the SUA tool to test an application and to see how it performs under the strict
standard user guidelines.
5. Which of the following tools are components of the Application Compatibility Toolkit v 5.5?
(Choose all that apply.)
a. Internet Explorer Compatibility Test tool
b. Compatibility Administrator
c. Compatibility tab
d. Setup Analysis tool
e. Standard User Analyzer
6. List some of the features of Windows Virtual PC with XP Mode.
Provides hardware emulation to runs operating systems in a VM.
Supports hardware assisted virtualization.
Emulates multiple hard disks and network cards.
Runs more than on operating system at the same time.
Launches legacy applications in older versions of Windows inside a VM.
Provides USB support and application integration from VM to host.

indows 7
13-29


LLC
L

13-30
Administering
Adminnistering

Global
LL

Running and Troubleshooting Applications - 50292 PDF

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Running and Troubleshooting Applications - 50292 PDF

Загружено:

Авторское право:

Доступные форматы

13