There’s a new node in the application manifest called trustInfo that can define the requested execution level. It’s required for their application verification, so they won’t need to play catch-up with new applications.

I’ve added this node to the affected applications for version 2.21, but older versions will still be affected by this issue.

Shouldn’t MS specify a ‘this requires admin’ flag any application can use?

Targeting existing products is good for the transition, but it seems to be a losing game if they have to keep track of it.