Running a Windows Server 2016 TP4 (you can think of it as Win10). There is an Admin account and a standard user account. Talking about local accounts here. No domain yet. The program I need to run requires elevation. The issue is with running it from the std user account.
This is NOT a duplicate of hundreds of identical questions. The solution to create a task and run the task by shortcut is not working here. Running the task by shortcut from the Admin account does work, but not from the std account.
Since I want this program to always be running, I created a task that will start it at logon of any user. But same results as with the above method. It works only for the admin account. The exe is not started.
Setting the task to run at computer startup (rather than at user logon) DID actually work, but then it runs in session ID 0, and I need the user to be able to interact with the program.
I tried adding it to HKLM\Software\Microsoft\Windows\CurrentVersion\Run, same results. In HKCU, same results.
Tried a logon script by GPO to start the exe, same results. Tried the logon script at computer startup, but as expected, it runs in session ID 0 :(
Tried logon script set directly on the user profile, same results.
I tried the all the above methods with a few other processes that require elevation, same result with all of them. None of them can start an elevated process for the std user. Event viewer isn't showing anything on this. I'm thinking there's some new protection something that preventing it.