Forum Discussion

MEB2004's avatar
MEB2004
Copper Contributor
Feb 01, 2024

Prevent admin users from changing UAC settings

We are setting UAC through the Security Baseline. However, admin users can change or turn off UAC and this will stay until the devices syncs with Intune or is restarted. This leaves the device vulnerable for up to 8 hours. I changed the Security Baseline setting to "not configured" and created a configuration profile to set UAC there. Most settings that get configured using a configuration profile are greyed out, but that is not the case for UAC.

 

Is there a way to grey out UAC settings so they cannot be changed, either through registry settings or Intune?

No RepliesBe the first to reply

Resources