I work for a school and we have installed some new software. One application installed with this software needs local administrator rights to run. We are in a domain environment and we need to keep group policy in place for everyone. Handing out local admin accounts is not an option. I am hoping someone can tell me a workaround for domain users to be able to run this one program as the local admin without it prompting for credentials, we don't want students knowing the local admin login name and password. I spent a couple of hours searching the internet yesterday and did not find a solution. There must be some way to do this, alter the shortcut? Registry settings? It does work when I add the user to local administrators group, but then they can login locally and do whatever they like (install software, bypass other security). Surely there is a way around this? Our stations are Windows 7 Pro, two DC's one running 2008 R2 and the other 2003.

We are no longer running this program due to this issue. Case closed.