GPO to let standard user run applications that need elevated privileges

Question

We have some apps that needs to be used on our LAN, on the clients PCs. But some of those apps needs "elevated privileges" to run, that means, the user must belong to the administrators group. That would be a hole for our workstation security, so, how can solve this?. Is there any GPo that can help the users to run some apps with "administrator privileges"?, without knowing the admin password, of course.

Please, help

Answer 1

Hello.

Yes is possible....create a GPO with this 2 settings.

• Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options.
• User Account Control: Run all administrators in Admin Approval Mode
• Enabled
• Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options.
• User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
• Elevate without prompting

These settings will allow non-administrative users to run certain applications with elevated privileges

I hope this helps

Regards

Answer 2

hi,

how can i allow a juste one specifique application ?

thank you