Improve NT Service scripts to support UAC on Windows >= Vista / Server 2008

Several fixes are possible (in order of preference).

1) Use "sc.exe" as suggested by Evgeny Mandrikov and as done in Jenkins
2) Add some remarks to the existing scripts to emphasis that they must be ran as Administrator

Interesting link about UAC: http://msdn.microsoft.com/en-gb/magazine/cc163486.aspx

According to http://msdn.microsoft.com/en-us/library/bb756929.aspx it's possible to patch existing binary in order to fully support UAC.
And here is exact steps for JSW :

1. create file temp.manifest with a content :
   temp.manifest

   <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
   <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
     <ms_asmv2:trustInfo xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2">
       <ms_asmv2:security>
         <ms_asmv2:requestedPrivileges>
           <ms_asmv2:requestedExecutionLevel level="requireAdministrator">
           </ms_asmv2:requestedExecutionLevel>
         </ms_asmv2:requestedPrivileges>
       </ms_asmv2:security>
     </ms_asmv2:trustInfo>
   </assembly>
   

2. execute tool mt.exe, which is available in the Microsoft Windows Software Development Kit :

   mt.exe -manifest temp.manifest -outputresource:wrapper.exe;#1.
   

We should check that patched version works fine in older Windows versions. And that Sonar can be launched not as a service from a regular non-privileged user.

One problem with a patch for manifest : patched version will always require administrator rights, whereas in fact they needed only to install / uninstall service and start / stop should work for non-privileged user.

I do believe that starting or stopping a service also requires administrative privileges.

start/stop service - yes, however I mean start/stop Sonar

1) Status of the fork of sonatype at: https://github.com/sonatype/jsw-binaries

• Same status as we have. No commit since Dec 09, 2010.

2) Nexus, same status as we have. No special mention about Windows in the documentation.

• http://www.sonatype.com/books/nexus-book/reference/install-sect-running.html
• http://www.sonatype.com/books/nexus-book/reference/ch03s06.html

(One thing: Their names are better, "Nexus.bat" instead of "StartSonar.bat" to start it in foreground)

3) Latest version of the Java Wrapper Service

• NT scripts are supported, but StartSonar.bat does not work anymore (it terminates immediatly), and wrapper.conf probably need changes.
• Their DemoApp does not require admin rights (no UAC prompt), but the service scripts do (UAC prompt). A single binary seems to be used.

Dinesh, about item 3 : newer JSW has a support for UAC, which is not simply declaration in manifest as we did, but an API call, when admin privileges required

Issue created at Sonatype, https://issues.sonatype.org/browse/NEXUS-4587

As was discussed with Dinesh one of the options - is to have two separated wrapper.exe : one usual as for now; and another one with manifest to work with services. So in attachment you'll find patched versions (32-bit and 64).

And option similar to previous is to use an elevate tool by replacing

"%_WRAPPER_EXE%" -t %_WRAPPER_CONF%

on

"%_REALPATH%elevate.exe" "%_WRAPPER_EXE%" -t %_WRAPPER_CONF%

in all "*NTService.bat"

Here is a list of found tools:

• http://www.winability.com/elevate/ - license doesn't allow redistribution
• http://www.wintellect.com/cs/blogs/jrobbins/archive/2007/03/27/elevate-a-process-at-the-command-line-in-vista.aspx - dependency on .NET
• http://jpassing.com/2007/12/08/launch-elevated-processes-from-the-command-line/ - LGPL rework of a previous one to C, but contains a check of OS version, which prevents usage on Windows XP, however this check can be simply removed