Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 842010" data-attributes="member: 32260">It seems that &lt;Lower EXE Restrictions&gt; feature can solve the issue of installing applications on SUA in UserSpace. For now, the user has to use SwitchDefaultDeny and turn OFF the protection temporarily. Next, &quot;Run By SmartScreen&quot; can be used to safely install the application. Finally, the user has to turn ON the protection again.I can extend &quot;Install By SmartScreen&quot; capabilities for the setting&nbsp; &lt;Lower EXE Restrictions&gt;.The application installer will be simply copied to &quot;AppData\Local\Temp\(random name)&quot; folder to run with SmartScreen check and with standard rights from this (whitelisted) location.No need to use SwitchDefaultDeny and the application installations/updates on SUA will be as easy as on Admin Account.I like &lt;Lower EXE Restrictions&gt; feature more and more...<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" /></blockquote>

[QUOTE="Andy Ful, post: 842010, member: 32260"] It seems that [B]<Lower EXE Restrictions> [/B]feature can solve the issue of installing applications on [B][COLOR=rgb(41, 105, 176)]SUA in[/COLOR][/B][COLOR=rgb(41, 105, 176)][B] UserSpace[/B][/COLOR]. For now, the user has to use SwitchDefaultDeny and turn OFF the protection temporarily. Next, "Run By SmartScreen" can be used to safely install the application. Finally, the user has to turn ON the protection again. I can extend "Install By SmartScreen" capabilities for the setting [B]<Lower EXE Restrictions>. T[/B]he application installer will be simply copied to "AppData\Local\Temp\(random name)" folder to run with SmartScreen check and with [B][COLOR=rgb(41, 105, 176)]standard rights[/COLOR][/B] from this (whitelisted) location. No need to use SwitchDefaultDeny and the application installations/updates on SUA will be as easy as on Admin Account. I like [B]<Lower EXE Restrictions> [/B]feature more and more...:giggle: [/QUOTE]

Verification