our it-manager asked me if there is a possibility to permanently check the "ask user permission" in lsremote.exe so that no administrator is able to uncheck the checkbox. I tried to use the option "/AP" but if the admin is fast enough he can uncheck the box so that it will be a leak of security.