Startup application issue

I have one legacy application,which needs admin access to run.
As part of Vista porting,I have manifested this app with HighestAvailable
securiy token using embedded RT_MANIFEST option. By doing this application is
getting the token of the logged on user token.

If the user logged on is Std User, then this application will act as
READONLY info and if logged on user is admin then full functionality will be
available to user.

As part of the requirement, I need to add this application in Vista startup.
But due to Windows Defender, my application is listing under blocked
application list becuase Windows Defender blocks all applications using non
invoker access token.

Is there any method that I can avoid Windows Defender blocking my
application with HighestAvailable access token ?

Any help on this is highly appreciated!


PS: Chaging major design change is not feasible due to legacy.