We had attempted to create a logon task that called on a .bat file to start a disabled service. The contents of the .bat are:
sc config EmOpti.Service start= demand
net start EmOpti.Service
It seems though that regular users, who have just user access locally, are getting denied. Apparently starting a service requires elevated rights.
Is there a better way to go about this? I was thinking of using the "Privilege Elevation" piece of UEM (9.2.1), since that's what it sounds like it's designed for, but, haven't touched it yet. I'd really rather not leave this service enabled by default on our parent image.
Thanks in advance.