In addition: http://msdn.micros...8v=vs.85%29.aspx#12 (msdn.microsoft.com)

Where a comment says:

Note: Using Windows XP both administrators/standard accounts don't require administrative rights to obtain a device handles.

This has changed on Vista, Windows 7 (UAC) where you MUST have administrator rights to obtain device handles.

1) Use a service
2) Use COM elevation moniker
3) Use Manifest

UAC, in my opinion, was a pretty bad idea. The fact that it imposes arbitrary access restrictions without giving you the ability to specifically override / disable them tells me that Microsoft decided it doesn't trust its users enough to give up control.