Single UAC prompt for a full install (v1.7.1)

CHANGELOG.md

@@ -2,6 +2,18 @@
 
 [繁體中文在下方](#更新紀錄)
 
+## v1.7.1 — 2026-10-17
+
+Fixed:
+
+- **A full install with the driver asked for administrator permission twice, not once.** Earlier notes (v1.5.0 and the driver documentation) said that an administrator account is asked once; that was not true when the driver was ticked: Windows asked for the install (the fix, with DynaRun's setup first when it was missing) and again for the driver's preparation. Now ONE elevated step does both, so an administrator account gets a single prompt for the whole install and none after the restart (the sign-in task already runs elevated). A standard user is asked for an administrator's password before the restart and, as before, once more after it. The red *Windows Security* "can't verify the publisher" window is not a UAC prompt and still appears twice.
+
+Changed (setup wizard):
+
+- **The driver pages come before the install** when the driver is ticked: after the license page (or, when DynaRun V3 is already installed, right after the first page) the wizard shows what the driver step does, looks for / downloads and checks the driver, and shows the restart-menu picture with the button *Install and restart*; that button installs the fix and prepares the driver in one elevated step and restarts the computer. *Skip* on these pages installs the fix without the driver; *Cancel* (or closing the window) on the restart page changes nothing. The page "Done" is not shown when the install goes straight on to the restart; its hints (pin to the taskbar by hand, the warning about the non-Unicode language setting) are shown on the restart page instead.
+- If the fix fails, the driver is not prepared and the usual error page appears. If the fix is installed but the driver preparation fails, the driver error page says that the fix itself is installed and points to the Start menu shortcut for trying the driver again. The driver alone (first page with only the driver, `/driver`, the Start menu shortcut) is unchanged: its restart page still reads *Restart now*, and it asks once.
+- Internal: the elevated stage (`/machine`, `/full`) takes `/with-driver <zip> [/unverified <sha256>]` and runs the driver's preparation in the same process after the fix; `/driver-prep` alone is unchanged.
+
 ## v1.7.0 — 2026-10-17
 
 Added (setup wizard):
@@ -484,6 +496,18 @@ Changed and fixed (after a review of v1.4.0):
 
 ## 更新紀錄
 
+### v1.7.1 — 2026-10-17
+
+修正:
+
+- **同時安裝驅動程式的完整安裝,系統管理員權限被詢問了兩次,而不是一次。** 先前的說明(v1.5.0 與驅動程式文件)寫「系統管理員帳戶只會問一次」,勾選驅動程式時其實不成立:Windows 為安裝(修正;DynaRun 還沒安裝時先裝它的安裝程式)問一次,為準備驅動程式又問一次。現在由**同一個**提升權限的步驟一次做完,所以系統管理員帳戶在整個安裝只會看到一次提示,重新開機後不會再問(登入時的排程工作本來就以提升的權限執行)。標準使用者在重新開機前要輸入系統管理員密碼,重新開機後和以前一樣再被要求一次。紅色的「Windows 安全性」「無法驗證發行者」視窗不是 UAC 提示,仍然會出現兩次。
+
+變更(安裝精靈):
+
+- **勾選驅動程式時,驅動程式的頁面排在安裝之前:** 授權合約頁之後(DynaRun V3 已安裝時,則是第一頁之後),精靈先說明驅動程式這一步要做什麼、尋找或下載並檢查驅動程式,再顯示重新開機選單的圖片和「安裝並重新開機」按鈕;按下後在同一個提升權限的步驟裡安裝修正、準備驅動程式,然後重新開機。這些頁面的「略過」只安裝修正、不裝驅動程式;重新開機那一頁按「取消」(或關閉視窗)不會改變任何東西。安裝直接進入重新開機時,不會顯示「完成」頁;它的提示(手動釘選到工作列、「非 Unicode 程式的語言」的警告)改在重新開機那一頁顯示。
+- 修正安裝失敗時,不會準備驅動程式,顯示原本的錯誤頁。修正已裝好、但驅動程式的準備失敗時,驅動程式的錯誤頁會說明修正本身已安裝,並指出可用開始功能表的捷徑再試驅動程式。只裝驅動程式的情況(第一頁只提供驅動程式、`/driver`、開始功能表捷徑)沒有改變:重新開機那一頁仍是「重新開機」,而且只問一次。
+- 內部:提升權限的階段(`/machine`、`/full`)可帶 `/with-driver <zip> [/unverified <sha256>]`,在同一個行程裡於修正之後執行驅動程式的準備;單獨的 `/driver-prep` 沒有改變。
+
 ### v1.7.0 — 2026-10-17
 
 新增(安裝精靈):

README.md

@@ -17,15 +17,15 @@ software (Dyna Pro Dynamometers, S68 and similar rigs) when it runs **natively o
 
 - Windows 10 or 11 (the installer also runs on Windows XP and 7; the automatic driver installation needs Windows 10 or 11).
 - A legally installed DynaRun V3, or the setup password you got from Dyna Pro (the installer can download and install DynaRun V3 for you).
-- Administrator permission for the install (Windows asks once). DynaRun itself never runs with more rights than a normal start.
+- Administrator permission for the install. On an administrator account Windows asks once for the whole install, the driver included; a standard user types an administrator's password, and again after the restart when the driver is installed. DynaRun itself never runs with more rights than a normal start.
 
 ## Install
 
 1. Download **`DynaRunFix-Setup.exe`** from [Releases](https://github.com/timliudev/DynaRunFix/releases) and double-click it.
    SmartScreen may say *"Windows protected your PC"* because the file is not code-signed: click **More info → Run anyway**.
 2. Follow the wizard. It installs DynaRun V3 first if it is missing (asking for the setup password from Dyna Pro), then the fix, and points DynaRun's shortcuts at it.
 3. **First time on this PC? Also install the Dyna Pro USB driver.** Leave **Also install the Dyna Pro USB driver (one restart needed)**
-   ticked on the first page (Windows 10 / 11); it needs one restart, where you press **7**. Steps and problems:
+   ticked on the first page (Windows 10 / 11); it needs one restart, where you press **7**; Windows still asks for permission only once. Steps and problems:
    [manual: Installing the Dyna Pro USB driver](https://github.com/timliudev/DynaRunFix/blob/main/docs/MANUAL.md#installing-the-dyna-pro-usb-driver) and the [driver guide](https://github.com/timliudev/DynaRunFix/blob/main/docs/DRIVER.md).
 
 ## Use
@@ -59,15 +59,15 @@ MIT, see [LICENSE](https://github.com/timliudev/DynaRunFix/blob/main/LICENSE). T
 
 - Windows 10 或 11(安裝程式也可在 Windows XP、7 執行;自動安裝驅動程式需要 Windows 10 或 11)。
 - 合法安裝的 DynaRun V3,或你從 Dyna Pro 取得的安裝密碼(安裝程式可以替你下載並安裝 DynaRun V3)。
-- 安裝時需要系統管理員權限(Windows 會問一次)。DynaRun 本身永遠不會以高於一般啟動的權限執行。
+- 安裝時需要系統管理員權限。使用系統管理員帳戶時，整個安裝（包括驅動程式）Windows 只會問一次；標準使用者要輸入系統管理員密碼，安裝驅動程式時重新開機後還會再問一次。DynaRun 本身永遠不會以高於一般啟動的權限執行。
 
 ### 安裝
 
 1. 從 [Releases](https://github.com/timliudev/DynaRunFix/releases) 下載 **`DynaRunFix-Setup.exe`**,雙擊執行。
    因為檔案沒有程式碼簽章,SmartScreen 可能顯示「Windows 已保護您的電腦」:按**其他資訊 → 仍要執行**。
 2. 照精靈畫面操作。還沒安裝 DynaRun V3 時會先安裝(會要求 Dyna Pro 給你的安裝密碼),接著安裝修正,並把 DynaRun 的捷徑指向它。
 3. **這台電腦第一次使用?還需要安裝 Dyna Pro USB 驅動程式。** 讓精靈第一頁的**同時安裝 Dyna Pro USB 驅動程式（需重新開機一次）**維持勾選(Windows 10 / 11);
-   需要重新開機一次,並在選單按 **7**。步驟與疑難排解:
+   需要重新開機一次,並在選單按 **7**;Windows 仍然只會詢問一次是否允許變更。步驟與疑難排解:
    [使用手冊:安裝 Dyna Pro USB 驅動程式](https://github.com/timliudev/DynaRunFix/blob/main/docs/MANUAL.md#安裝-dyna-pro-usb-驅動程式)與[驅動程式指南](https://github.com/timliudev/DynaRunFix/blob/main/docs/DRIVER.md#繁體中文)。
 
 ### 使用

docs/DRIVER.md

@@ -31,8 +31,10 @@ available.
   the first error with **Continue download** (from the part that is already there), **Open website**, **Choose file...** (the zip, or ftdibus.inf in the folder where it is
   unpacked: the same check follows) and, in the main installer, **Skip**. If Windows says the computer has no network at all, that page comes at once.
 * If DynaRun V3 and the fix are already installed and only the driver is missing, the installer's first page offers just the driver.
-* Windows asks for administrator permission (UAC). On an administrator account that is once; a standard user may be asked for an
-  administrator's password again after the restart. If BitLocker protection is on (or its status cannot be read), the wizard suspends it until the driver is installed
+* Windows asks for administrator permission (UAC) **once** on an administrator account, for the whole installation: in the main installer the same prompt
+  (on *Install and restart*) installs the fix, installs DynaRun V3 first if the wizard does that too, and prepares the driver; none follows after the restart. A standard user is asked
+  for an administrator's password before the restart and again after it. The red *Windows Security* "can't verify the publisher" window (below) is not a UAC prompt. In the main installer the
+  driver pages (download and check, the picture of the restart menu) come before anything is installed, and **Skip** installs the fix without the driver. If BitLocker protection is on (or its status cannot be read), the wizard suspends it until the driver is installed
   (at most 3 restarts as a safety net, then it is resumed automatically; it is also resumed when the installation finishes or you cancel),
   sets the one-time advanced boot options and registers a task that continues the wizard when you sign in. While it is suspended, the
   drive is not protected; if you decide not to go on, cancel in the wizard (or run `/driver-cancel`, see below) so that it is resumed.
@@ -205,7 +207,7 @@ DynaRunFix 安裝程式可以幫你做完下面的步驟。除非它說做不到
 * 精靈會先找你已經有的「Dyna Pro USB.zip」(它自己先前下載的、精靈所在資料夾、下載資料夾與其下一層、桌面、文件;檔名不限,所以「Dyna Pro USB (1).zip」也算,已經解開的資料夾例如 Downloads\Dyna Pro USB 也算),內容正確就直接使用、不用下載;找不到才從 dynapro.co.uk 下載官方的 zip(不內附)。檢查的是**內容**:Windows 會安裝的 18 個檔案(兩個 INF、它們的兩個 catalog,以及它們所指定的 i386 與 amd64 的 `.sys` / `.dll`)必須各自符合程式內建的 SHA-256;zip 裡的其他檔案(readme、FT Clean、重複的「64-Bit Drivers」資料夾)不看,也只解開這 18 個。Windows 安裝的就是解開並檢查過的那份。
 * 如果檔案不同(可能是 Dyna Pro 更新了驅動程式,也可能是檔案損毀或被竄改),精靈會顯示警告頁,列出來源、zip 的 SHA-256 和不同的檔案。只有套件看起來仍是 Dyna Pro 的(18 個檔案都在、bus INF 含 Dyna Pro 的裝置 ID)才會提供「仍要安裝」(不是預設按鈕);否則請用下方的手動方式。選「仍要安裝」只對那一個 zip、這一次安裝有效,並記錄在 `driver.log`。「仍要安裝」生效期間,暫存資料夾裡有 `accepted.txt`(只含實際暫存的那些檔案的 SHA-256),驅動程式步驟結束時刪除。如果你對這台電腦上找到的檔案取消了警告頁,之後的嘗試(包括繼續與重試)都會改從 Dyna Pro 官網下載;在重新開啟精靈之前,不會再提供內容不同的檔案。只有精靈自己找到的副本會這樣被跳過:你用 **選擇檔案…** 選的檔案或資料夾一律照實檢查,不受這個記憶影響。
 * DynaRunFix 不驗證驅動程式檔的數位簽章。它只比對檔案的 SHA-256 與程式內建的值,而在「仍要安裝」時檢查 bus INF 是否含 Dyna Pro 的裝置 ID。內容不同的套件來源可不可信,由你自己判斷。
-* Windows 會要求系統管理員權限(UAC)。使用系統管理員帳戶時只會問一次;標準使用者在重新啟動後可能會再被要求輸入系統管理員密碼。若 BitLocker 保護為開啟(或無法讀取其狀態),精靈會暫停它直到驅動程式安裝完成(最多 3 次重新啟動作為保險,之後自動恢復;安裝完成或你按取消時也會恢復),設定一次性的進階開機選項,並登錄一個工作,在你登入後讓精靈繼續。暫停期間磁碟機沒有受到保護;如果你決定不繼續,請在精靈中按取消(或執行 `/driver-cancel`,見下方),讓保護恢復。
+* Windows 會要求系統管理員權限(UAC)。使用系統管理員帳戶時，整個安裝只會問**一次**:在主安裝程式中,按「安裝並重新開機」時的同一次提示,就涵蓋修正的安裝(精靈也要安裝 DynaRun V3 時先裝它)和驅動程式的準備,重新啟動後不會再問。標準使用者在重新啟動前會被要求輸入系統管理員密碼,重新啟動後還會再被要求一次。紅色的「Windows 安全性」「無法驗證發行者」視窗(見下方)不是 UAC 提示。在主安裝程式中,驅動程式的頁面(下載與檢查、重新開機選單的圖片)排在安裝任何東西之前,按 **略過** 就只安裝修正、不裝驅動程式。若 BitLocker 保護為開啟(或無法讀取其狀態),精靈會暫停它直到驅動程式安裝完成(最多 3 次重新啟動作為保險,之後自動恢復;安裝完成或你按取消時也會恢復),設定一次性的進階開機選項,並登錄一個工作,在你登入後讓精靈繼續。暫停期間磁碟機沒有受到保護;如果你決定不繼續,請在精靈中按取消(或執行 `/driver-cancel`,見下方),讓保護恢復。
 * 重新啟動後,在啟動選單按 **7**(停用驅動程式強制簽章)。精靈會顯示下面這個畫面,建議先用手機拍下來。圖上會標出「7) 停用驅動程式強制簽章」那一行並寫著 **按 7**。
 
   | 按 7 |