Privileged application

[HughBroadhead]

I would be grateful to a solution to the following:

I need to create either a desktop shortcut, or a simple application which will run a "target" application with a particular set of pre-set parameters. However, the user must not have the ability to run the target application directly.

 

[MacMan]

There's really not enough info here. If you're running default or roaming profiles then you might not be able to do it since a shortcut is running the program, just starting it from a different location. In these cases you can try policy adjustments to place some limitations. If however, you're runing mandatory profiles, then your software is running from the server but in either case how the software runs depends on how the program is executed. The shortcut should be to an executable with paramaters that will only run the program the way you want it run.
For example: shortcut c:\WIDGET runs the file z:\WIDGET/U/V (users/viewing mode only).

 

[HughBroadhead]

To clarify the initial question:
This only concerns a single machine running NT workstation, i.e. the application to be run is installed on and run by a user at that workstation. Using your example, I could create a shortcut (or script) c:\WIDGET to run application z:\WIDGET /U /V, but for the shortcut to work, the user needs to have execute privilege on z:\WIDGET. Therefore, there is nothing to stop the user running z:\WIDGET with any parameters they choose. What I think I want is for the shortcut or script to have the appropriate privilege to run z:\WIDGET /U /V, i.e. as if the script can login to NT as administrator (or whatever), whilst the user is only able to execute the script and nothing else.