How to Let a Standard User Run a Program Without Admin Rights on Windows 10

Most programs that ask for administrator rights don’t really need them. They just need permission to write to their own folder or registry key, or they request admin rights out of habit. On Windows 10, an administrator can let a standard user run these programs by giving the Users group Modify permission on the program’s folder, or by launching the app with the RunAsInvoker compatibility setting so it runs without the admin prompt. For programs that truly need admin rights, an administrator can set up a Task Scheduler task that runs the program with elevated rights.

All of these methods need an administrator to set them up once. There’s no safe way for a standard user to get around admin rights on their own, and that’s by design.

Which method should you use?

Situation	Best method	Security risk
App shows a UAC prompt but works fine for admins	RunAsInvoker (Method 1)	Low
App errors about saving settings or “access denied” in its folder	Folder permissions (Method 2)	Low to medium
App errors about the registry	Registry permissions (Method 3)	Low to medium
App truly needs admin rights, like a driver tool	Task Scheduler (Method 4)	Medium
Anything, as a last resort	runas /savecred (Method 5)	High. Not recommended.

Method 1: Run the program without the admin prompt (RunAsInvoker)

This tells Windows to run the app with the user’s normal rights instead of asking for admin rights. It works when a program asks for elevation but doesn’t actually need it.

Test it with a shortcut

1. Sign in as the standard user.
2. Right-click the desktop and choose New > Shortcut.
3. Enter this, replacing the path with the program’s location:
   cmd /min /c "set __COMPAT_LAYER=RUNASINVOKER && start "" "C:\Program Files\MyApp\MyApp.exe""
4. Click Next, name the shortcut, and click Finish.
5. Double-click the shortcut. If the program opens and works normally, you’re done.

Make it permanent for that program

1. While signed in as the standard user, press Windows + R, type regedit, and press Enter.
2. Go to HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers. Create the Layers key if it doesn’t exist.
3. Right-click in the right pane, choose New > String Value, and name it with the program’s full path, like C:\Program Files\MyApp\MyApp.exe.
4. Double-click it and set its value to RUNASINVOKER.

If the program opens but can’t save settings or crashes, it needs to write somewhere protected. Continue with Method 2 or 3.

Method 2: Give users permission to the program’s folder

Older programs often save settings inside their own folder in C:\Program Files, which standard users can’t change.

1. Sign in as an administrator.
2. Open File Explorer and go to the program’s installation folder, such as C:\Program Files (x86)\MyApp.
3. Right-click the folder and choose Properties > Security > Edit.
4. Select Users, or click Add and type the specific user’s name.
5. Check Allow next to Modify, then click OK.

Give access only to the program’s own folder, never to all of Program Files or C:\Windows. Giving users Modify rights means they, and any malware running as them, can change that program’s files.

To find exactly which files or folders a program is blocked from, run Microsoft’s free Process Monitor tool as an administrator while the standard user runs the app, and filter for ACCESS DENIED.

Method 3: Give users permission to a registry key

1. As an administrator, open regedit.
2. Go to the program’s key, usually HKEY_LOCAL_MACHINE\SOFTWARE\CompanyName\AppName. On 64-bit Windows, 32-bit programs use HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CompanyName\AppName.
3. Right-click the key and choose Permissions.
4. Select Users and check Allow next to Full Control, then click OK.

Back up the key first with File > Export, and only change the key for that one program.

Method 4: Use Task Scheduler for programs that truly need admin rights

An administrator can create a task that runs the program with full rights, and let the standard user start it with a shortcut.

1. Sign in as an administrator and open Task Scheduler.
2. Click Create Task (not Create Basic Task).
3. On the General tab, name it without spaces, like RunMyApp. Check Run with highest privileges and choose Run only when user is logged on.
4. Click Change User or Group and pick the administrator account the task should run as.
5. On the Actions tab, click New > Browse and select the program.
6. On the Settings tab, make sure Allow task to be run on demand is checked. Click OK and enter the admin password.
7. Give the standard user permission to run the task. Open C:\Windows\System32\Tasks, right-click the RunMyApp file, choose Properties > Security, add the user, and allow Read & execute.
8. Create a desktop shortcut for the standard user with this target:
   C:\Windows\System32\schtasks.exe /run /tn "RunMyApp"

Only use this for programs you trust completely. Anything the program opens also runs with admin rights.

Method 5: runas /savecred (not recommended)

A shortcut with runas /user:PC\AdminName /savecred "C:\Path\App.exe" saves the administrator’s password the first time it’s used. After that, the standard user can run any program as an admin with the same trick, which defeats the purpose of a standard account. Use one of the methods above instead.

Other options to try first

• Install a per-user version. Many apps, like Chrome, Zoom, Spotify, and VS Code, offer installers that go into the user’s own folder and don’t need admin rights.
• Update the program. Newer versions often fix old admin requirements.
• Check the Microsoft Store. Store apps install without admin rights.
• At work or school? Ask your IT department. They may use tools like Intune, Group Policy, or Endpoint Privilege Management to approve specific apps.

Frequently asked questions

Can a standard user bypass the admin password?

No, and you should be wary of tools that promise to. Windows requires an administrator to approve changes that affect the whole PC. The methods above work because an administrator sets them up.

Why does a program need admin rights at all?

Some programs install drivers, change system settings, or write to protected folders. Others ask for admin rights only because they were written for older versions of Windows.

Do these methods work on Windows 11?

Yes. The steps are the same on Windows 11.

Can I use this on a work computer?

Only if you’re the administrator or your IT team approves. Changing permissions on a managed PC may break company policy.