Forum Discussion
UAC elevation prompt for standard users
MSFT Windows 10 21H2 - Computer have the following setting recommendation Policy: User Account Control: Behavior of the elevation prompt for standard users Setting: Automatically deny elevation...
Intune is an option as well.
Sorry, was that directed to me? I already mentioned about using Intune as a delivery tool for the policy.
- Apologies, I thought I was replying to Aaron's earlier comment. 🙂
- Not a problem. 🙂
- The problem isn't making exceptions in GPO or Intune for this setting, but how I manage the clients if this setting is set to Automatically deny elevation requests
- Ok, in that case the available options that comes to my mind are switching user to admin account or elevating permissions on demand for a standard user using a 3rd party script or an app. Make me an admin is an example.
- If you absolutely need to log in to an interactive desktop on the target system to perform the administrative actions, then switch-user and log in with that admin account. UAC different-user elevation is MUCH less secure. Keep that option disabled.
