By default, VS assumes that an application requires full trust to run & as such enters it into the application manifest. You can change this default using the Security tab in project properties. We chose this default simply because we have found that most apps do require a high level of trust & the usability of “ClickOnce” is much better if we have a default that allows applications to run.