Very restricted desktop, mandatory profile w/FPK, all apps provided via PNAgent. Need to be allow a user to run an app via RunAs for elevated privileges. I'm thinking provide a shortcut to pnamain.exe and let them run that with elevated privileges. Someone must have a better idea though.