The Process Rights action folder contains the actions to remove or add administrator rights. You can remove administrator rights for applications such as web browsers to increase their locked down state for both administrators and standard users.
The available Process Rights actions are as follows:
- Add Administrative Rights - This action adds the basic administrator rights needed to install and run an application with administrator rights.
- Add Administrative Rights - Unrestricted - This action adds administrator rights at a higher integrity level. Usually you will only need to add administrator rights (unrestricted) if an application or installer needs to create a global object, such as a service, or if system changes require unrestricted administrator rights.
- Remove Administrative Rights - This action removes administrative rights for specified applications.
- Remove Advanced Privileges Action - This action removes advanced privileges for specified applications.
The following screenshot shows the different settings you can apply to Process Rights actions.
