Say I have a program that requires administrator access to start up, but not for its regular runtime operations. Is there a way for the program to demote itself programmatically so that if a vulnerability in the program is exploited it won't have administrator privileges? I'm speaking more specifically here to Windows, but I'd presume, if it is possible, a similar process can be done on Linux or perhaps other operating systems.
Is this possible?