Throw UnauthorizedAccessException when encountering admin issue

Author: Jack251970

Flow.Launcher/Helper/AutoStartup.cs

@@ -61,21 +61,45 @@ private static bool CheckLogonTask(bool alwaysRunAsAdministrator)
         {
             try
             {
-                // Check if the action is the same as the current executable path
-                // If not, we need to unschedule and reschedule the task
                 if (task.Definition.Actions.FirstOrDefault() is Microsoft.Win32.TaskScheduler.Action taskAction)
                 {
                     var action = taskAction.ToString().Trim();
-                    if (!action.Equals(Constant.ExecutablePath, StringComparison.OrdinalIgnoreCase) || // Path issue
-                        !CheckRunLevel(task.Definition.Principal, alwaysRunAsAdministrator)) // Run level issue
+                    var pathCorrect = action.Equals(Constant.ExecutablePath, StringComparison.OrdinalIgnoreCase);
+                    var runLevelCorrect = CheckRunLevel(task.Definition.Principal.RunLevel, alwaysRunAsAdministrator);
+
+                    if (_isAdministrator)
+                    {
+                        // If path or run level is not correct, we need to unschedule and reschedule the task
+                        if (!pathCorrect || !runLevelCorrect)
+                        {
+                            UnscheduleLogonTask();
+                            ScheduleLogonTask(alwaysRunAsAdministrator);
+                        }
+                    }
+                    else
                     {
-                        UnscheduleLogonTask();
-                        ScheduleLogonTask(alwaysRunAsAdministrator);
+                        // If run level is not correct, we cannot edit it because we are not administrator
+                        if (!runLevelCorrect)
+                        {
+                            throw new UnauthorizedAccessException("Cannot edit task run level because the app is not running as administrator.");
+                        }
+
+                        // If run level is correct and path is not correct, we need to unschedule and reschedule the task
+                        if (!pathCorrect)
+                        {
+                            UnscheduleLogonTask();
+                            ScheduleLogonTask(alwaysRunAsAdministrator);
+                        }
                     }
                 }
 
                 return true;
             }
+            catch (UnauthorizedAccessException e)
+            {
+                App.API.LogError(ClassName, $"Failed to check logon task: {e}");
+                throw; // Throw exception so that App.AutoStartup can show error message
+            }
             catch (Exception e)
             {
                 App.API.LogError(ClassName, $"Failed to check logon task: {e}");
@@ -86,9 +110,9 @@ private static bool CheckLogonTask(bool alwaysRunAsAdministrator)
         return false;
     }
 
-    private static bool CheckRunLevel(TaskPrincipal tp, bool alwaysRunAsAdministrator)
+    private static bool CheckRunLevel(TaskRunLevel rl, bool alwaysRunAsAdministrator)
     {
-        return alwaysRunAsAdministrator ? tp.RunLevel == TaskRunLevel.Highest : tp.RunLevel != TaskRunLevel.Highest;
+        return alwaysRunAsAdministrator ? rl == TaskRunLevel.Highest : rl != TaskRunLevel.Highest;
     }
 
     private static bool CheckRegistry()