I have one legacy application,which needs admin access to run. As part of Vista porting,I have manifested this app with HighestAvailable securiy token using embedded RT_MANIFEST option. By doing this application is getting the token of the logged on user token.
If the user logged on is Std User, then this application will act as READONLY info and if logged on user is admin then full functionality will be available to user.
As part of the requirement, I need to add this application in Vista startup. But due to Windows Defender, my application is listing under blocked application list becuase Windows Defender blocks all applications using non invoker access token.
Is there any method that I can avoid Windows Defender blocking my application with HighestAvailable access token ?
Any help on this is highly appreciated!
PS: Chaging major design change is not feasible due to legacy.