YarsinCitrix
commented
2 years ago James, we later added the parameter matching, so in this case we can probably use some command line matching for powershell.exe (like powershell.exe C:\test\scripts.ps1) to run the scripts, saving the effort to make it an exe. However, in that case the if the scripts file is alterable for the user, then it leaves a hole, and the exe way will be better.
For the batch logon case, we have later added network logon if the batch logon fails, which gives user another opportunity.
JamesKindon
Conquering Per User Firewall Rules with Citrix WEM Privilege Elevation
Conquering Per User Firewall Rules with Citrix WEM Privilege Elevation
https://jkindon.com/conquering-per-user-firewall-rules-with-citrix-wem-privilege-elevation/