Is there a way to set the Privilege Level for legacy software via group policy or on the command line?

I have some legacy software, which we unfortunately cannot move away from. This software requires administrator access. I know I can go into the Properties dialog and check "Run this program as an administrator" on every single instance on every single one of my workstations, but that gets old after the 30th install.

If I had my way, we would dump this software, find some software that did what we needed, was fully compliant with Win7 security best-practices and give everyone limited user accounts...

However, I am not the boss, so everyone gets administrator accounts. Given that, I suppose I could just tell everyone to open the context menu and choose "Run as administrator", but we have some very, very, VERY low-tech users, and half of them might just choose "Delete" instead.

Anyone know of a way to set this option on the command line? or better yet, through Group Policy?

  • 1
    Are you sure that running it as administrator is technically required? Frequently you just modifing the filesystem and registry permissions is enough to get an application to work. – Zoredache Jun 28 '10 at 5:29
  • I've fixed quite a few older applications by using "Application Shims" to make them believe they are running with administrative privileges, while sandboxing their registry and file system access. – Gepeto Feb 11 '11 at 23:56

In the past I have used a command line utility called Elevate to do this by calling it from the application's shortcut and changing the icon to that of the application. You could push this out with the install or via Group Policy?

  • That will be perfect. I can push this out to all users. Thanks for the tip. – Joseph Alcorn Jun 1 '11 at 18:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.