How to bring one application from default desktop to custom desktop?

Jyothi R 6

Is there any way to bring one application from default desktop to custom desktop?

For example, CredentialUIBroker.exe(microsoft service) is always appear in default desktop(Winsta0\default).

I want to make this to appear in programmatically created new desktop.

Can you suggest a solution for this?

RLWA32 40,021 Reputation points

2021-12-13T09:31:36.2+00:00

Is this a continuation of the issues discussed in https://learn.microsoft.com/en-us/answers/questions/647721/windows-security-popup-not-shows-in-secure-desktop.html?
Jyothi R 6 Reputation points

2021-12-13T10:39:45.627+00:00

Yes, it is a continuation of the issue.

In our context: sample application and related WebView2 processes are created as a parent-child hierarchy, where windows security dialog, which is created under CredentialUIBroker.exe, is not a child process of our application, but is a child of windows service(winint.exe).
Minxin Yu 9,866 Reputation points Microsoft Vendor

2021-12-14T05:45:27.343+00:00

It seems that you are using WPF (webview2) according to the link. May I know which C++ application you are using？
Jyothi R 6 Reputation points

2021-12-14T09:29:41.723+00:00

Details of the issue is discussed in https://learn.microsoft.com/en-us/answers/questions/647721/windows-security-popup-not-shows-in-secure-desktop.html.

I have two application, one is a WPF application for loading and initializing WebView2 processes and the second one is a C++ application for creating a new desktop and launching the WPF application in that new desktop.

The WPF application shows browser login and when we click login with security key option, the OS popup for security key insertion is not shown in new desktop. Instead the popup appeared in the previous desktop.

Windows security dialog appeared as part of WebAuthN::AuthenticatorMakeCredential() call from WebView2, and it came as child process of Credential Manager UI Host/CredentialUIBroker.exe.
When analyzed with process explorer WebView2 testapp and WebView2 runtime processes are started in custom desktop, but CredentialUIBroker.exe started in default desktop.

As mentioned above, sample application and related WebView2 processes are created as a parent-child hierarchy, where windows security dialog, which is created under CredentialUIBroker.exe, is not a child process of our application, but is a child of windows service(winint.exe).
Minxin Yu 9,866 Reputation points Microsoft Vendor

2021-12-15T02:08:09.137+00:00

Thank you for taking the time to report this issue. However, this problem is more related to CredentialUIBroker , and I haven't touched on the security key.

1 answer

RLWA32 40,021 Reputation points

2021-12-30T10:06:08.877+00:00

In my Windows 10 21H1 system CredentialUIBroker.exe is identified as a local server under several AppID keys the registry (64-bit and 32-bit). You can also see it using the component services tool in DCOM config.

One of the registry values that appears under several of the AppID keys is for a value named AppIDFlags. According to https://learn.microsoft.com/en-us/windows/win32/com/appidflags "If the APPIDREGFLAGS_ACTIVATE_IUSERVER_INDESKTOP flag is set in the AppIDFlags value, COM will either bind to, or launch and bind to, the server process running in the client's desktop and the session in the activation request. For example, if the client is running "winsta0\desktop1" in session 3, the activation request for session 3 will either bind to, or launch and bind to, the COM server in "winsta0\desktop1" in session 3, even if an instance of the COM server is already running in "winsta0\default" in session 3."

I'm guessing that this flag might be the answer to the wrong desktop issue. However, I have not tested it and cannot advise exactly which of the several AppID keys for CredentialUIBroker.exe is applicable in your circumstance. Should you choose to modify the registry to set this flag I strongly suggest testing thoroughly (a virtual machine would be helpful) and with appropriate backups available.
Please sign in to rate this answer.
Jyothi R Nair 1 Reputation point

2022-01-05T13:57:11.59+00:00

Thank you for the reply.

First of all we have no permission to edit/update AppIDFlags value of CredentialUIBroker.exe, only TrustedInstaller has it. I tried by overriding the permission to set APPIDREGFLAGS_ACTIVATE_IUSERVER_INDESKTOP flag value.

I saw many occurances of CredentialUIBroker appid in locations such as: HKEY_CLASSES_ROOT, 64-bit and 32-bit locations. By changing HKEY_CLASSES_ROOT location CredentialUIBroker AppIDFlags value itself modify values in other location also.

But security dialog didnt show up this time in default and custom desktop aswell. Any thoughts ?

RLWA32 40,021 Reputation points

2022-01-05T14:19:48.867+00:00

I don't know how you changed the registry. However, my idea was to set the flag that I mentioned. That means that you need to be careful not to replace the prior registry values in their entirety.

raroraca 0 Reputation points

2023-01-28T10:39:10.27+00:00

Hi RLWA32,

Thank you for the recommendation, Tried to update the flag as suggested. But even when the flag is set, still the security dialogs from CredentialUIBroker.exe did not show up on the new desktop but rather went on the default one.

Do you think it can be because of the RunAs to be set for Interactive Users?

Do you have any further recommendations here, as the above flag di not help to resolve the issue?

RLWA32 40,021 Reputation points

2023-01-28T11:30:57.8633333+00:00

raroraca,

That flag was my best guess. Perhaps this is an issue for which affected users should open a support case with Microsoft.
Sign in to comment