Change user account control settings

%3CLINGO-SUB%20id%3D%22lingo-sub-2267141%22%20slang%3D%22en-US%22%3EChange%20user%20account%20control%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2267141%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Gents%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMuch%20appreciate%20it%20if%20someone%20can%20advise%20how%20to%20pre-set%20the%20%22Change%20user%20account%20control%20settings%20level%22%20for%20Windows%2010%20user%20via%20the%20Intune%20policy%20control.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPurpose%3A%20I%20realize%20the%20default%20setting%20is%20%22Always%20notify%20me%22%20this%20caused%20UAC%20popup%20black%20screen%20during%20the%20remote%20session.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot_1.jpg%22%20style%3D%22width%3A%20748px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F271863iB06E8CDE074621B9%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Screenshot_1.jpg%22%20alt%3D%22Screenshot_1.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%3C%2FP%3E%3CP%3ESk%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2267141%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2267428%22%20slang%3D%22en-US%22%3ERe%3A%20Change%20user%20account%20control%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2267428%22%20slang%3D%22en-US%22%3EYou%20can%20modify%20the%20elevation%20prompt%20to%20not%20use%20secure%20desktop%20via%20a%20security%20baseline%20policy%20which%20will%20allow%20you%20to%20see%20the%20prompt%20during%20remote%20sessions%3A%3CBR%20%2F%3E%3CBR%20%2F%3EStandard%20user%20elevation%20prompt%20behavior%3A%3CBR%20%2F%3EThis%20policy%20setting%20controls%20the%20behavior%20of%20the%20elevation%20prompt%20for%20standard%20users.%3CBR%20%2F%3E%3CBR%20%2F%3EAutomatically%20deny%20elevation%20requests%20-%20When%20an%20operation%20requires%20elevation%20of%20privilege%2C%20a%20configurable%20access%20denied%20error%20message%20is%20displayed.%20An%20enterprise%20that%20is%20running%20desktops%20as%20standard%20user%20may%20choose%20this%20setting%20to%20reduce%20help%20desk%20calls.%3CBR%20%2F%3E%3CBR%20%2F%3EPrompt%20for%20credentials%20on%20the%20secure%20desktop%20-%20When%20an%20operation%20requires%20elevation%20of%20privilege%2C%20the%20user%20is%20prompted%20on%20the%20secure%20desktop%20to%20enter%20a%20different%20user%20name%20and%20password.%20If%20the%20user%20enters%20valid%20credentials%2C%20the%20operation%20continues%20with%20the%20applicable%20privilege.%3CBR%20%2F%3E%3CBR%20%2F%3EPrompt%20for%20credentials%20-%20When%20an%20operation%20requires%20elevation%20of%20privilege%2C%20the%20user%20is%20prompted%20to%20enter%20an%20administrative%20user%20name%20and%20password.%20If%20the%20user%20enters%20valid%20credentials%2C%20the%20operation%20continues%20with%20the%20applicable%20privilege.%3CBR%20%2F%3E%3CBR%20%2F%3Emore%20info%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fprotect%2Fsecurity-baseline-settings-mdm-all%3Fpivots%3Dmdm-december-2020%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fprotect%2Fsecurity-baseline-settings-mdm-all%3Fpivots%3Dmdm-december-2020%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2269669%22%20slang%3D%22en-US%22%3ERe%3A%20Change%20user%20account%20control%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2269669%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F886589%22%20target%3D%22_blank%22%3E%40SK0703%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20really%20depends%20on%20what%20product%20you%20are%20using%20for%20a%20remote%20control%20session.%20If%20you%20are%20using%20teamviewer%20UAC%20is%20definitely%20a%20problem.%20Of%20course%20you%20can%20change%20the%20black%20screen%20by%20configuring%20the%20intune%20policy%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Rudy_Ooms_1-1618302364657.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272368iE300853BADA198FA%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Rudy_Ooms_1-1618302364657.png%22%20alt%3D%22Rudy_Ooms_1-1618302364657.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EBut%20the%20best%20solution%20(if%20you%20are%20using%20teamviewer%20or%20some%20product%20like%20that)%20just%20use%20windows%20verification%20in%20teamviewer%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Rudy_Ooms_0-1618302328751.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272366iFCA30F62433BE6F5%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Rudy_Ooms_0-1618302328751.png%22%20alt%3D%22Rudy_Ooms_0-1618302328751.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2269742%22%20slang%3D%22en-US%22%3ERe%3A%20Change%20user%20account%20control%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2269742%22%20slang%3D%22en-US%22%3EHi%20MM_JJ%3CBR%20%2F%3EThank%20you%20so%20much%20for%20your%20kind%20advice%20on%20this%20post.%20I%20will%20update%20you%20with%20the%20outcome.%3CBR%20%2F%3ETake%20care%20%26amp%3B%20Stay%20safe.%3CBR%20%2F%3ECheers%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2269751%22%20slang%3D%22en-US%22%3ERe%3A%20Change%20user%20account%20control%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2269751%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F620702%22%20target%3D%22_blank%22%3E%40Rudy_Ooms%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%20for%20your%20response.%3C%2FP%3E%3CP%3ECurrently%2C%20we're%20using%20Windows%2010%20default%20app%20quick%20assist.%20I%20will%20update%20you%20with%20the%20outcome.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22quickassist-start-type.png%22%20style%3D%22width%3A%20586px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272378i8961EE9E4B9C1303%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22quickassist-start-type.png%22%20alt%3D%22quickassist-start-type.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi Gents,

 

Much appreciate it if someone can advise how to pre-set the "Change user account control settings level" for Windows 10 user via the Intune policy control.

 

Purpose: I realize the default setting is "Always notify me" this caused UAC popup black screen during the remote session.

 

Screenshot_1.jpg

 

Best regards

Sk 

10 Replies
You can modify the elevation prompt to not use secure desktop via a security baseline policy which will allow you to see the prompt during remote sessions:

Standard user elevation prompt behavior:
This policy setting controls the behavior of the elevation prompt for standard users.

Automatically deny elevation requests - When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls.

Prompt for credentials on the secure desktop - When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.

Prompt for credentials - When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.

more info: https://docs.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-mdm-all?pivots=mdm-de...

@Sk-73 

 

It really depends on what product you are using for a remote control session. If you are using teamviewer UAC is definitely a problem. Of course you can change the black screen by configuring the intune policy:

Rudy_Ooms_1-1618302364657.png

But the best solution (if you are using teamviewer or some product like that) just use windows verification in teamviewer

 

 

Rudy_Ooms_0-1618302328751.png

 

Hi MM_JJ
Thank you so much for your kind advice on this post. I will update you with the outcome.
Take care & Stay safe.
Cheers

Hi @Rudy_Ooms 

Many thanks for your response.

Currently, we're using Windows 10 default app quick assist. I will update you with the outcome.

quickassist-start-type.png

Hi @Thijs Lecomte 

 

Thanks for the advice. I will check it out the link.

Cheers =)

Hi @MM_JJ   

 

It seems like my colleague have manage to resolve the UAC popup black screen issue. 

 

Untitled.png I'm not sure is it because of this policy. Will need your kind advice.

 

Thanks.

SK

Hi @Rudy_Ooms 

 

I hope all good with you.

Are you able to see and get the notification about if I reply on this post? 

I'm not too sure is it I need to reply with the outcome by 1 by 1.

 

Thanks.

Sk

Hi, All good :)
Of course.. . Yes that is the option I and Thijs was referring. In my first reply I posted a picture of that setting

Hi @Rudy_Ooms 

 

ahh I see, it looks like the issue has already resolve by my collogue before I carry out all the steps.
Many thanks for you guys swift response and the kind advice.

Cheers