Forum Discussion

andreaskrovel's avatar
andreaskrovel
Copper Contributor
Mar 23, 2022

UAC elevation prompt for standard users

MSFT Windows 10 21H2 - Computer have the following setting recommendation   Policy: User Account Control: Behavior of the elevation prompt for standard users   Setting: Automatically deny elevation...
rahuljindal's avatar
rahuljindal
Bronze Contributor
Mar 25, 2022
Sorry, was that directed to me? I already mentioned about using Intune as a delivery tool for the policy.
andreaskrovel's avatar
andreaskrovel
Copper Contributor
Mar 28, 2022
The problem isn't making exceptions in GPO or Intune for this setting, but how I manage the clients if this setting is set to Automatically deny elevation requests
  • rahuljindal's avatar
    rahuljindal
    Bronze Contributor
    Mar 28, 2022
    Ok, in that case the available options that comes to my mind are switching user to admin account or elevating permissions on demand for a standard user using a 3rd party script or an app. Make me an admin is an example.
    • AaronMargosis_Tanium's avatar
      AaronMargosis_Tanium
      Iron Contributor
      Mar 28, 2022
      If you absolutely need to log in to an interactive desktop on the target system to perform the administrative actions, then switch-user and log in with that admin account. UAC different-user elevation is MUCH less secure. Keep that option disabled.