14: How do I elevate MMC snap ins without granting administrative rights?

A standard user may not be able to run an MMC console without elevated rights. For instance, a standard user does not have the ability to start, stop or change the configuration within any service. This article will step through the process to create a policy to allow this and other items similar to this.

Create a new GPO or edit an existing one
Expand the PolicyPak node (user or computer policies may be used but general recommendations are to us users where possible) and select "Least Privilege Manager"
Create a new "New Executable Policy"
Select "Use combo rule (advanced)" and click NEXT
Select "Apply command-line arguments", leaving everything else as-is and click NEXT
Under Path Condition, click Add -> Add file ...
In the Path field, type in "*\mmc.exe" (no "") and click OK
Click on Command-line Arguments, select "Strict equality", under Arguments type in the exact path to services.msc (*C:\Windows\system32\services.msc*) and click NEXT
Ensure "Run with elevated privileges" is selected and click NEXT
Name it according to your conventions (e.g. "Elevate Services.msc") and click FINISH