Forum Discussion
MEB2004
Feb 01, 2024Copper Contributor
Prevent admin users from changing UAC settings
We are setting UAC through the Security Baseline. However, admin users can change or turn off UAC and this will stay until the devices syncs with Intune or is restarted. This leaves the device vulnerable for up to 8 hours. I changed the Security Baseline setting to "not configured" and created a configuration profile to set UAC there. Most settings that get configured using a configuration profile are greyed out, but that is not the case for UAC.
Is there a way to grey out UAC settings so they cannot be changed, either through registry settings or Intune?
No RepliesBe the first to reply