We are about to roll out several hundred new machines running Windows 7 x64, with the OS installed via WDS so at the moment we can make changes and sysprep them into the build.
The problem is a .NET application we wrote years ago which itself spawns a modified command shell. That shell runs a DataFlex (DataFlex 3.2 dfruncon) application that itself needs to run with elevated permissions.
We don't grant users any general administrator rights.
Is there a mechanism where we can pre-allow our .NET application to run as administrator so that the command control runs as Administrator?
I'm aware of the changes I can make in the app.manifest
file to require that the program runs as Administrator. I'm not aware of how I can (as an Administrator) configure the machine to allow that to happen without giving the user more rights or credentials than I would want them to have. Is there something the equivalent of CasPol to allow me to specify that a given EXE file can run as administrator? If not, how on earth would I go about figuring out exactly what rights the user needs to have to allow DataFlex's dfruncon to run?