Automatically run a program as administrator on limited user's desktop

[entryman]

I am using Windows 7 x64. I have several programs I would like to start automatically with administrator privileges on a limited user desktop. In task scheduler I can schedule a start as administrator at each logon of the limited user. The problem is when I do this it starts in session 0. In other words, the GUI of the program is not on the user's desktop.

I can change the task scheduler entry to use Sysinternals' psexec -i -h options to put the program on whatever user account is using the console desktop, which happens to be my limited user. However I am concerned this could be exploited. For example, if the limited user logs on remotely task scheduler will still run psexec which will still put the administrator process on the console desktop. Should another user be logged in they would have administrator privileges (I think).

psexec allows one to specify the session number via -i but does not have a way to say start in xxx user's session.

Does anyone know what I'm talking about or a way to solve the problem? Thanks

 

[Brink]

Hello entryman,

If you like, you could use the tutorial below to create an elevated shortcut of the program that a standard user can run.

http://www.sevenforums.com/tutorials/193743-elevated-program-shortcut-create-standard-user.html