Create a process with ordinary rights from an administrator process

Question

There is any way to run another process with ordinary rights from a process running as administrator? From a process with elevated rights I want to start a process with ordi

Answer 1

The technique I've used with success is to use IShellDispatch2::ShellExecute to ask Explorer to launch the process. Since Explorer typically runs as normal integrity, this is effective. The trick is that it's a bit of work to get the IShellDispatch2 object. I followed the process outlined in this blog.