I'm trying to change some firewall settings on Windows 7 workstations. For this, I've created a bundle with "Launch executable" action, which launches netsh.exe with necessary command line parameters. Executable security level is set to "Run as secure system user (Don't allow system to interact with desktop)"

When I run the command manually in Command Prompt which has been started "as Administrator", it works and firewall is modified the way I need. When running in Command Prompt which is simply started by an user with Administrator rights, it does not work. This is documented behaviour by Microsoft.

The Launch status of my Zenworks bundle shows that the bundle has been launched successfully on workstations. However, firewall modifications are not made.

Is the "secure system user" security level sufficient for actions that require "run as Administrator" on Windows 7?