Forum Discussion

Sk-73's avatar
Sk-73
Iron Contributor
Apr 12, 2021

Change user account control settings

Hi Gents,

 

Much appreciate it if someone can advise how to pre-set the "Change user account control settings level" for Windows 10 user via the Intune policy control.

 

Purpose: I realize the default setting is "Always notify me" this caused UAC popup black screen during the remote session.

 

 

Best regards

Sk 

  • MM_JJ's avatar
    MM_JJ
    Copper Contributor
    You can modify the elevation prompt to not use secure desktop via a security baseline policy which will allow you to see the prompt during remote sessions:

    Standard user elevation prompt behavior:
    This policy setting controls the behavior of the elevation prompt for standard users.

    Automatically deny elevation requests - When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls.

    Prompt for credentials on the secure desktop - When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.

    Prompt for credentials - When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.

    more info: https://docs.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-mdm-all?pivots=mdm-december-2020

    • Sk-73's avatar
      Sk-73
      Iron Contributor
      Hi MM_JJ
      Thank you so much for your kind advice on this post. I will update you with the outcome.
      Take care & Stay safe.
      Cheers
    • Sk-73's avatar
      Sk-73
      Iron Contributor

      Hi MM_JJ   

       

      It seems like my colleague have manage to resolve the UAC popup black screen issue. 

       

       I'm not sure is it because of this policy. Will need your kind advice.

       

      Thanks.

      SK

  • Sk-73 

     

    It really depends on what product you are using for a remote control session. If you are using teamviewer UAC is definitely a problem. Of course you can change the black screen by configuring the intune policy:

    But the best solution (if you are using teamviewer or some product like that) just use windows verification in teamviewer

     

     

     

Resources