When attempting to mount an image with an elevated “FTK Imager” application, a “Server Busy” dialogue box will present itself a moment after starting to browse for the image.
When this appears, the only way to get out of this is to end the task through Task Manager.
To get around this error, we need to deselect the “Don’t elevate Open/Save dialog” option when creating the elevation policy for the application “FTK Imager”. This is selected by default on all new policies.
This checked by default to prevent users from gaining unauthorized administrative rights through the Open/Save dialog box to their endpoint. Unchecked, you open up the possibility for a knowledgeable operator to gain administrative access to the computer. For more information in this, please refer to this KB video -> https://kb.policypak.com/kb/article/1170-increase-security-by-reducing-rights-on-open-save-dialogs/
In this case, to limit the rights the end-user could take advantage of, when the Open/Save dialog box option is deselected, changing the Action to “Run with customized token” allows you to reduce the integrity level of the process, thereby reducing the rights given to the process and, by extension, the end-user.
Under Token, set the Base Token to “Always create and use an elevated token” and Integrity level to “Medium-plus”. This will allow the application to run as desired, but not give access to the end-user to change system files.
