The upstream build process should be manifesting your EXE with the require administrator attribute. This doesn't have anything to do with InstallShield or the shortcut. Done correctly when the user clicks the shortcut, Windows will see the manifest and UAC will prompt for elevation.