You can use this group policy to use an alternate user's role to run an application. The alternate user's credential is required when you use an alternate user's role. This policy does not apply to the runasrole command-line interface.
There are two settings for this group policy:
- By default, when this policy is Disabled or Not Configured, the user can run an application with only their user role.
- When this policy is Enabled, the user can use another user's role to run an application.