Forum Discussion
CMD prompt for password
Hi ,
Can someone help me with this.
I want to implement a security std as any user trying to install/trying run cmd with admin privilege should be asked to enter a username and password.
I tried to push out a policy from Intune to "prompt for password when std user is trying to download/run cmd with admin privileges".However our for the new devices it asks for the password - we din set up one. I tried the default and blank entries. no luck.
What is the best way to implement this ?
Regards,
Akhila
Hi AkhilaNelson
Hi,
make sure that the User is Member of the Local Group "Administrators" (which by the way is actually not recommended) and also make sure you got the right User-Account-Control Settings (UAC). If set via Intune you should go with the Local Policies Security Options and the setting "User Account Control Behavior Of The Elevation Prompt For Administrators" and set this to "Prompt for credentials on the secure desktop"If you want a more secure approach for Administrative Access for End Users (since end users shouldn't be Admins on their devices) i think you should look at the Feature "Endpoint Privilege Management", which sadly comes at additional costs.
Thank you for the reply!
The policy is actually pushing out to new users [new azure AD joined devices are by default std users]. And asking for the admin password. However we did not set up this. I tried them from our password manager as well. Not working. Is there anyway we can reset this password. I think it must be a global admin password or something ?
Akihla
- Hi,
The admin password is somehow my MS 365 password! Is there anyway I can change that ?
Regards,
Akhila
