Get-ChildItem "C:WindowsSystem32*.exe" | Select-String -pattern "<autoElevate>true</autoElevate>"
bthudtask.exe:81: <autoElevate>true</autoElevate>
changepk.exe:183: <autoElevate>true</autoElevate>
ComputerDefaults.exe:300: <autoElevate>true</autoElevate>
dccw.exe:449: <autoElevate>true</autoElevate>
dcomcnfg.exe:87: <autoElevate>true</autoElevate>
DeviceEject.exe:114: <autoElevate>true</autoElevate>
DeviceProperties.exe:86: <autoElevate>true</autoElevate>
djoin.exe:300: <autoElevate>true</autoElevate>
easinvoker.exe:474: <autoElevate>true</autoElevate>
EASPolicyManagerBrokerHost.exe:357: <autoElevate>true</autoElevate>
eudcedit.exe:1329: <autoElevate>true</autoElevate>
eventvwr.exe:125: <autoElevate>true</autoElevate>
fodhelper.exe:240: <autoElevate>true</autoElevate>
fsquirt.exe:430: <autoElevate>true</autoElevate>
FXSUNATD.exe:129: <autoElevate>true</autoElevate>
immersivetpmvscmgrsvr.exe:690: <autoElevate>true</autoElevate>
iscsicli.exe:398: <autoElevate>true</autoElevate>
iscsicpl.exe:90: <autoElevate>true</autoElevate>
lpksetup.exe:3349: <autoElevate>true</autoElevate>
MSchedExe.exe:75: <autoElevate>true</autoElevate>
msconfig.exe:470: <autoElevate>true</autoElevate>
msra.exe:1898: <autoElevate>true</autoElevate>
MultiDigiMon.exe:189: <autoElevate>true</autoElevate>
newdev.exe:130: <autoElevate>true</autoElevate>
odbcad32.exe:78: <autoElevate>true</autoElevate>
PasswordOnWakeSettingFlyout.exe:222: <autoElevate>true</autoElevate>
recdisc.exe:655: <autoElevate>true</autoElevate>
rrinstaller.exe:273: <autoElevate>true</autoElevate>
shrpubw.exe:220: <autoElevate>true</autoElevate>
slui.exe:1811: <autoElevate>true</autoElevate>
SystemPropertiesAdvanced.exe:88: <autoElevate>true</autoElevate>
SystemPropertiesComputerName.exe:88: <autoElevate>true</autoElevate>
SystemPropertiesDataExecutionPrevention.exe:87: <autoElevate>true</autoElevate>
SystemPropertiesHardware.exe:88: <autoElevate>true</autoElevate>
SystemPropertiesPerformance.exe:86: <autoElevate>true</autoElevate>
SystemPropertiesProtection.exe:86: <autoElevate>true</autoElevate>
SystemPropertiesRemote.exe:88: <autoElevate>true</autoElevate>
SystemSettingsAdminFlows.exe:2164: <autoElevate>true</autoElevate>
SystemSettingsRemoveDevice.exe:178: <autoElevate>true</autoElevate>
Taskmgr.exe:11500: <autoElevate>true</autoElevate>
tcmsetup.exe:118: <autoElevate>true</autoElevate>
TpmInit.exe:226: <autoElevate>true</autoElevate>
WindowsUpdateElevatedInstaller.exe:217: <autoElevate>true</autoElevate>
WSReset.exe:132: <autoElevate>true</autoElevate>
wusa.exe:582: <autoElevate>true</autoElevate>