GPO for Elevated Rights

[BrianPitt]

Is there a good way to setup via Group Policy the ability for accounts with local administrator rights only to open certain executables (not all) without a UAC prompt?  THings like mmc.exe / regedit.exe / etc.

This is more of a convenience thing as there are a group of executables we would like to avoid UAC Prompts on constatntly but only for administrator rights accounts.

Also,

What is the best way to give elevated privileges to a certain folder or file in Windows and alow only certain users to have the rights?  The best thing I have right now is under Computer Configuration / Policies / Windows Settings / Security Settings / File System, adding the folder or file there and then adding an AD User Group to security of the file or folder and giving that group full rights to it.  Looking to see if that is best or if another option?

[#2]

Hi,
since your question is about Windows 10, please post it in the correct community, Thank you
https://techcommunity.microsoft.com/t5/windows-10/ct-p/Windows10

[#3]

Thanks @HotCakeX!

@BrianPitt Hello! You've posted your question in the Community Discussion space, which is intended for discussion around the Tech Community website itself, not product questions. I'm moving your question to the Windows 10 space - please post Windows 10 questions here in the future.