I've just tried your program as I'm looking how to allow a standard user the ability to install software. Allowing them this level also allows them to go to c:\windows\system32 and run regedit as administrator. Instead of 'allowing' a list of programs would it also be possible to exclude a list of folders?
SuRun cannot allow/deny access to folders.
All it does is running processes with administrator privileges.
Once the process runs, SuRun has no control of it.