Application started after install always seems to run with administrator privileges

[Michael_Hutchin]

I am having a problem with IS 2009 running an application after a Basic MSI install. It always seems to be run with administrator privileges It doesn't matter if I implement it using InstallScript or CA EXE.

My installer requests administrator privileges, via UAC, during start-up but everything I have read says that an Immediate Execution CA placed after ExecuteAction should run in the user context and not the administrator context.

I tested this using a CA to start ‘CMD.exe /K’.
At the end of the install it starts a command window and using ‘whoami /privs’ it shows elevated credentials compared to a standard command window.

I then tested this using a CA to start regedit.exe which requires UAC authentication to view correctly.
At the end of the install it always displays without a UAC request.

Has anyone seen this behavior before?

Can anyone reproduce it?

Can anyone give me any insights into how to get the application to start in the user context?

Thanks,
Michael

[Michael_Hutchin]

I found out why this was happening...

...I had set the Release 'Require Execution Level' to 'Administrator' so it was promoting at setup.exe start.

When I changed the setting to 'Invoker' all was as expected!