Forum Discussion
UAC elevation prompt for standard users
MSFT Windows 10 21H2 - Computer have the following setting recommendation Policy: User Account Control: Behavior of the elevation prompt for standard users Setting: Automatically deny elevation...
Running elevated processes on a non-admin desktop is risky - there are too many ways for non-admin code to hijack those elevated permissions. Much better isolation to perform the installation from an admin's desktop or through a service (e.g., Microsoft's SCCM or Tanium's "Deploy" capability.)
Our management solution, SCCM/Intune, fixes >90% of the installations, uninstalls, upgrades ++. But some error situations requires Administrators permissions. I guess I'll need to invest more time in SCCM/Intune or helpdesk will need to "Switch user, and log in as Administrator" to fix the problem?
I'm just trying to figure out what the "cost" will be to following the standard and what other companies are doing.
I'm just trying to figure out what the "cost" will be to following the standard and what other companies are doing.