Uninstall user scope under admin via a custom integrity verification

[eugenesvk]

Relevant area(s)

WinGet CLI

Description of the new feature / enhancement

If you install an app under admin (but with the default "user" scope) to be able to install to Program Files, you won't be able to uninstall this app using Winget since it blocks such uninstalls for security reasons
#6345 (comment)

But then I've noticed that winget creates hidden file droppings on some installations and tought - why can't you simply store the hash of the uninstaller user registry data in the same admin protected folder so that on admin uninstall you can verify that the uninstaller registry hadn't been tampered with?
Then you'd be able to not block admin uninstalls

Proposed technical implementation details

• on install of user scoped app in an admin protected location: store a hash of the user registry uninstall entry in the hidden winget database file when a user supported
  • alternative (since I afaik the issue is broader than just admin protected folders): when installing with admin privileges store this verification in an admin-protected registry ?
• on uninstall - instead of rejecting outright verify that the uninstall entry matches the admin-protected hash and if it does, proceed with the uninstall. If it doesn't, warn the user of the changes.

(the hashed data might be limited to just the uninstall command field?)

[github-actions]

Possible duplicate(s):

Thank you for submitting this issue.

The issue(s) below may already track your request or bug. Please take a look — if one of them matches, give that issue a 👍 and close this one as a duplicate. Older or curated issues are preferred as the canonical one to follow.

• Cannot uninstall user-scoped packages using Administrator account #6363 — Directly tracks the inability to uninstall user-scoped packages when running as Administrator (the root problem your proposal aims to solve)
• Default (user) installations as admin should warn (or block without a flag) that the package may be impossible to uninstall #6443 — Tracks a related issue: warns that installing user-scoped packages as admin can make them impossible to uninstall (same scenario)

Template: msftbot/duplicate/surfaced by Duplicate Surfacing