In the update Windows 10 1607 (Anniversary Update) one of the innovations was the automatic launch of some applications in compatibility mode . When this happens, the request for elevation of privileges. (There are programs that normally started under the user in 1511, but began to ask for administrative access in 1607)

Thus, when you run some software under a user account without administrative privileges, a UAC window is displayed asking for administrator credentials. Without the administrator’s credentials of the computer’s user, the user cannot run such software.

The problem has the described solution using the compatibility setting with the RUNASINVOKER setting by setting a variable or editing the registry

But both solutions eliminate the problem of launching a specific program from a specific location (for the first you have to edit a shortcut or make a bat-nickname, for the second, the full path of the launch is indicated in the registry).

It is necessary to decide how to make all programs run by any limited user (administrators should not be distributed) started with RUNASINVOKER.

    1 answer 1

    He himself found the answer:

    Current user's environment variables are stored in the HKCU\Environment .

    Default profile environment variables - HKEY_USERS\.DEFAULT\Environment

    Get to the variable of each user with a profile in the system: HKEY_USERS\<SID>\Environment

    It is enough to go through all the HKEY_USERS\<SID>\Environment registry branches and add a key named __COMPAT_LAYER type REG_SZ with the RunAsInvoker value where required (where the user is not an administrator).