Background
Arellia Application Control Solution provides end users with the ability to Request Run as Administrator so that a program can be launched using Administrative privileges. This is facilitated by enabling the User Requested Elevation Justification Policy in the Arellia Console.
Problem
If the program that has been requested for elevation spawns a child process a new justification prompt will be presented to the user. This is not ideal as a user should not need to know about or justify any child processes, just the parent process that they launched in Windows Explorer.
Resolution
...
Background
Application Control Solution allows users to launch programs using Administrative privileges by enabling the self elevation policy, User Requested Elevation Justification Policy.
Problem
When users launch the program enabled by the self elevation policy, child processes associated with that program generate justification prompts.
Resolution
You can modify the self elevation policy and turn off the justification prompts by doing the following steps:
- In the Security Manager Console, click the Policies tab.
- In the file library in the left pane, navigate to Policies > Arellia > Application Control > Privilege Management.
...
- Click the User Requested Elevation Justification Policy.
- Under the Applications to Control
...
- tab set the conditions as follows:
- Include only:
...
- Add the Interactive Users filter located
...
- under Filters > Dynamic Filters > Application Context.
- Exclude any:
...
- Add the Administrators filter located
...
- under Filters > Dynamic Filters > User Context
...
...
- .