Install/Run Pulseway Remote Control App for non-admin users

[tbleier]

Hi, we're running our Admin sessions for Pulseway on a Windows Server 2022 Remote Desktop Server with Microsoft Security Baseline installed, and the Servicedesk Admin Users are running as "normal" users in Windows without administrative privileges on the Windows Server / RDS Session Host. What is the functioning way to deploy the Pulseway Remote Control App (Version 9.7) in this scenario? Here's what we've tried:

• Install the RemoteDesktop.msi with a user with administrative privileges, "for all users" -> in this case on starting a Pulseway Remote Desktop Session an elevation prompt appears - but since our Servicedesk Admins do not have administrative rights on the Server, they cannot run the Remote Desktop
• Try to install "for this user only" - when running the installer, the UAC prompt still pops up and requires admin privileges, which is a little annoying. However, after that it seems to work. Still, from a security perspective this means this produces an AppLocker Bypass vulnerability, as we have to allow execution of files from the Remote Desktop Application directory, which in this case resided in the User Profile Path with write access for the user

Is there anything I'm missing, or what would be the correct way to install Pulseway Remote Console in a locked-down environment?

thanks and br,

__
/homas

[aman16.1]

good saying bro