Is there a #sudo equivalent for Windows?
I do not mean "run as administrator", I want to remove all administrative permissions from a user, but allow him to run a given program with administrative rights without knowing the administrator's password.

1