Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 854
  • Last Modified:

Launch a URL shortcut with elevated permissions

I have a Windows 2008 R2 Citrix XenApp 6.5 server that users log into and browse a specific website contain JavaScript that they log into. Certain features in the site work when a Windows administration logins and accesses the site or when a regular Windows user accesses the site by launching Internet Explorer with elenvated permissions (right-click > Run as Administrator (no authenication prompt appears)). However when the users access it normally the features don't work.

How can I modify the URL shortcut on their desktop to automatically launch IE with elevated permissions and pull up the site? For now the users are doign this manually with a right-click on an IE shortcut and a IE Fav after IE is launched. But, I need to streamline this process for them. The website's developer has been no help. They keep suggesting I lower or reset our IE security setting. However, I've already done that and reset all of the IE settings and recreated one of the user's Windows profile.

Features that are not working normally:
- Click Printer Friendly Version and another small window opens via JavaScript that displays printer options. Users with the issue get no error and no window opens.
- Click Contact Us link and a new tab appears in IE. Users with the issue see a blank tab.
  • 2
1 Solution
You can adjust the group policy settings using group policy...

These values are located in Computer Configuration | Policies | Windows Settings | Security Settings | Local Policies | Security Options with the following values:
 • User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
 • User Account Control: Detect application installations and prompt for elevation
 • User Account Control: Turn on Admin Approval Mode
Ayman BakrSenior ConsultantCommented:
Right click on the shortcut -> click on properties -> select the Compatibility tab -> Tick the Run the program as an administrator checkbox

Hope this helps.
iVenture_SolutionsAuthor Commented:
thomasclm: We have the UAC set to Never on this server. It's required for some of the accounting software the users have on this XenApp server.

Mutawadi: Since this is a URL shortcut to a website and now a LNK shortcut to an EXE file, the Compatibility tab does not exisit for the Desktop shortcut we have taking users rigth to the website. I could do that on the general Internet Explorer icon that all users use, but that seems like a security risk since they would use the shortcut to access any website for all of their web browsing. Any other ideas?
Ayman BakrSenior ConsultantCommented:
But aren't your users already doing this manually? Isn't it also a security risk that while doing it manually they can browse to any site?

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now