I have a program that will not run unless I give the users admin access of the local pc. I dont want to do this for obvious reasons. What is the best way to make this program run. Is there anyway (policy) to set that the program can run using admin access only for this program. I deny access to the c drive through policies and all users are set as domain users. This is a school environment and the issues is with student login as a domain user. If I add the students group to the local admin account the program runs but will not run under power users group. I just need to give them access to a couple directories there. I have the desktop disabled and I puch all app shortcuts out through policies.