Self-Elevation Without Adding Administrator Rights

Using the default self-elevation users can give justification and launch applications with administrator rights (for details, go to Self-Elevation). The following steps allow users to request elevation, but not to add administrator rights to the application.

1. In the Security Manager Console, click Policies.
2. In the file library in the left pane click Policies > Arellia Solutions > Application Control > Actions > Messages > Advanced.
3. Right-click Justify Application Elevation Action and click Clone.
    
4. Enter a name for the new elevation action.
5. Right-click the cloned message and click View as XML.
    
6. In the XML view dialog box, click Edit.

7. Scroll down to <terminateExitCode>100</terminateExitCode> and change the "100" to "0."

8. Click the Import button.
   
    
    
9. In the Confirm Import dialog box, click Yes.
   
    
    
10. Close the XML view dialog box.
11. In the file library in the left pane, navigate to Policies > Arellia Solutions > Application Control > Policies > Privilege Management > User Requested Elevation Justification Policy.
12. In the right pane, click the Application Actions tab.
13. Click the link next to Application Action
14. In the Select Items dialog box, move the copy of the Justify Application Elevation Message to Selected Items (and also leave the Add Administrator Rights).
    
     
     
15. Click OK.
16. Click the Save button in the right pane under User Requested Elevation Justification Policy.
    
    

These requests will then be viewable in the Event Summary and Acknowledgement Viewer.

Doing the above steps will allow Arellia Application Control to work correctly but will not continue adding administrative rights to a program after a justification is given because you changed the terminateExitCode change from 100 to 0.