In the Windows installer we have the option to start tlclient directly after installation. However this might start the client as the wrong user, as the installer will run as a different user if the logged on account does not have the rights to install software. E.g.: 1. logged in as ossman 2. get a UAC prompt asking for an admin user 3. enter Administrator credentials 4. install tlclient 5. let the installer start tlclient at the end 6. client now runs as Administrator, not ossman
See also bug 7260, which is a similar scenario without the change of user.
Related discussions: https://stackoverflow.com/questions/48844435/get-logged-in-username-in-nsis-installer-when-running-as-another-user-admin https://stackoverflow.com/questions/2414991/how-to-launch-a-program-as-as-a-normal-user-from-a-uac-elevated-installer https://www.codeproject.com/Articles/18946/High-elevation-can-be-bad-for-your-application-How
It would be easy to remove the run-after-install option from our installer, but it is unknown how many users like that feature.
