Hi, I everybody knows (well at least at Wilders) that is possible to use the taskmanager and virtualise an application when running UAC. I have been looking for a way to use this as an extra defense running 32 bits aps (virtualisation only applies on x32 aps). I found this http://csi-windows.com/blog/all/27-...w-can-i-uac-prompt-thee-let-me-count-the-ways So I googled a bit further with this info On social.answers.microsoft.com/Forums/en-US/w7programs/thread/e6c7d7f2-21be-49ce-8d93-c06b1c616002 I found that the compatibility mode values are stored in the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers So I opened REGEDIT and looked what I had in. I noticed that some programs where listed which I wanted to start as admin. So I added Iron as Invoker to override the Manifest in the EXE. Added: Reg-SZ key Name: C:\WIndows\SRWare Iron\iron.exe Value: RUNASINVOKER See picture (this was on Vista x32 business) Now it runs with low rights, no execute up in download directory, EMET2 (SAFE-Admin setup) and virtualised AND the excellent CHROME sandbox Would any one try it on Windows 7? @Sully something to add in safe-admin when it works?