Tally wants administrator rights. On a shared server that leaves two bad options: hand the password to every accountant, or make them all administrators. HTwo Tally Launcher removes the choice.
Share the password and any user can install software, read other tenants' folders or stop your services. Withhold it and Tally will not start.
A background service holds the privileges and starts Tally on the user's own desktop. Nothing is granted to the account, so nothing can be misused later.
The launcher your users see has no special rights at all. It asks a service to start Tally, and the service decides whether that request is allowed.
An ordinary application, running as an ordinary user. No prompt, no elevation.
Over a local named pipe that only signed-in users of this machine can reach.
The path must be on the approved list, and the file must genuinely be published by Tally.
In the user's own session, with the privileges Tally needs. Nothing is granted to the account.
Most of this exists because shared Tally servers behave differently from a single accountant's desktop.
C:\TallyPrime, D:\Clients\Sharma\Tally or a dozen folders
at once, it is found and configured. Nothing is hardcoded to a drive letter.
Anything that can start a program with administrative rights is worth being careful about. This one is deliberately built so that it can only ever start Tally.
The service runs what is on its own approved list, never a path a user supplies.
Ask it for cmd.exe and the request is refused
and logged.
Renaming something to Tally.exe does not work. The publisher recorded in the file is checked when it is approved and again every time it is launched.
The approved list lives in an administrator-owned folder with inheritance broken. Standard users can read it and nothing more.
No administrator password is stored, encrypted or requested. No UAC bypass. No account is added to any group. The service simply already has the rights.
Who asked, for which installation, in which session, and whether it was allowed. Refusals are logged as loudly as successes.
No Tally file is modified, moved or renamed. Company data, licences and configuration are left exactly as they are.