Background
Application Control Solution allows users to launch programs using Administrative privileges by enabling the self elevation policy, User Requested Elevation Justification Policy.
Problem
When users launch the program enabled by the self elevation policy, child processes associated with that program generate justification prompts.
Resolution
You can modify the self elevation policy and turn off the justification prompts by doing the following steps:
- In the Security Manager Console, click the Policies tab.
- In the file library in the left pane, navigate to Policies >
...
- Thycotic > Application Control > Privilege Management.
- Click the User Requested Elevation Justification Policy.
- Under the Applications to Control tab set the conditions as follows:
- Include only: Add the Interactive Users filter located under Filters > Dynamic Filters > Application Context.
- Exclude any: Add the Administrators filter located under Filters > Dynamic Filters > User Context.