The only way I know how to get rid of it is to use the Microsoft ACT (Application Compatibility Toolkit) to create a SHIM (http://blogs.technet.com/b/askperf/archive/2011/06/17/demystifying-shims-or-using-the-app-compat-toolkit-to-make-your-old-stuff-work-with-your-new-stuff.aspx)... I have had mixed results with this.
One of our clients was able to get around all UAC prompts by using an ACT SHIM and also installing the full client (but still using the web components). They are running APM not Firepass is the only difference.
I don't have tons of time to dedicate to it right now and our company has just gotten used to it "in the name of security". If you are able to create a SHIM that works and if you can document the process please share.
Seth
Nimbostratus
