Windows Vista introduced User Account Control. A new manifest element, <trustInfo>, allows application developers and system administrators to define how much privileges does this program require.
- Run with the current privileges of the calling user.
- Use the highest privileges this user can have; administrator, if posisble.
- This program must run with administrative privileges; ask for an account and password if this user is not an administrator
The default setting is "asInvoker" which means that the program will be happy running with whatever privileges this user is running right now. Only programs that really need elevated privileges need to specify this element in the manifest.