Forum Discussion
Configure "Set User Account Control (UAC) to automatically deny elevation requests"
Hi,
I am implementing security recommendations from Defender and I'm not sure about this one "Set User Account Control (UAC) to automatically deny elevation requests".
I understand it will deny activities such as "app installations" for standard users.... However, how it will behave for actions like - run Task Manager, run Event Viewer etc which also trigger UAC asking for admin credentials? Will that be denied as well? If so, how can I run it with the policy above implemented?
thank you ...
2 Replies
Yes, any action requiring administrative privileges will be denied.
Task Manager it is a multi-layered service when it comes to permissions. To view running processes you dont need elevated permissions. Some processes may require admin privileges to end a process or even change its priority. Not all, but there some that do. Any of those that require admin privileges would be denied.
Event Viewer does not usually need admin privileges.
Many of the built-in Windows system tools don't need admin privileges and would not prevent use by an unprivileged user. I would look to the documentation for details on specific tools.
As far as running it, you can either use an admin account to accomplish the task, Temporarily disable UAC, or use "Run as Administrator" for certain tools or apps.
I hope this helps.
G.
Hi! .. thanks for your input...
The reason why I ask about those - for example - is that when I try to run Task manager... or event viewer, I get an UAC to provide admin credentials.... So lets say that I have a user complaining on slow computer performance and I would like to check task manager / or lets say kill some process/app that got stuck, how I will be able to do it? ...
UPDATE:
I've just found that task manager for example can be found via Start and ran as admin... heh... always used "right click on task bar" to work with it.... So looks like majority of the tools like this can be ran as admin with no issues...
