UAC - Elevation prompt for standard users

%3CLINGO-SUB%20id%3D%22lingo-sub-1659304%22%20slang%3D%22en-US%22%3EUAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1659304%22%20slang%3D%22en-US%22%3E%3CP%3EI%20had%20the%20thread%20opened%2C%20with%20no%20real%20resolution%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Flync%2Fen-US%2F5b725ad6-2eef-4687-8069-ecb3ef41efb8%2Fuac-elevation-prompt-for-standard-users%3Fforum%3Dmicrosoftintuneprod%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Flync%2Fen-US%2F5b725ad6-2eef-4687-8069-ecb3ef41efb8%2Fuac-elevation-prompt-for-standard-users%3Fforum%3Dmicrosoftintuneprod%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnybody%20has%20any%20more%20ideas%20why%20it%20simply%20does%20NOT%20work%20for%20me%20(apart%20from%20runas%20only)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ES%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1659304%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUAC%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1659714%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1659714%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F109083%22%20target%3D%22_blank%22%3E%40Sebastian%20cerazy%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20you%20tried%20configuring%20UIA%20elevation%20prompt%20behavior%20in%20endpoint%20protection%20device%20configuration%20in%20endpoint%20manager%3F%20Elevation%20prompt%20for%20standard%20users%20-%20%22Prompt%20for%20credentials%20on%20the%20secure%20desktop%22%20and%20Route%20elevation%20prompts%20to%20user's%20interactive%20desktop%20-%20%22enabled%22%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1660397%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1660397%22%20slang%3D%22en-US%22%3E%3CP%3EOfcourse%20that%20is%20where%20I%20have%20it%20configured%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22endpoint-protection%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F217970iB4049E5A4A815FED%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22endpoint-protection%22%20alt%3D%22endpoint-protection%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1660451%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1660451%22%20slang%3D%22en-US%22%3ECan%20you%20check%20if%20the%20setting%20is%20applied%20on%20the%20device%3F%20No%20conflict%20settings%20from%20baselines%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1660854%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1660854%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20registry%20entries%20do%20exist%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1665989%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1665989%22%20slang%3D%22en-US%22%3EOkey%2C%20I%20will%20try%20to%20reproduce%20this%20behavior%20in%20lab.%20Will%20come%20back%20with%20results.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1686846%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1686846%22%20slang%3D%22en-US%22%3E%3CP%3EAnybody%20any%20input%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1750143%22%20slang%3D%22en-US%22%3ERe%3A%20UAC%20-%20Elevation%20prompt%20for%20standard%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1750143%22%20slang%3D%22en-US%22%3E%3CP%3EBUMP%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

I had the thread opened, with no real resolution:

 

https://social.technet.microsoft.com/Forums/lync/en-US/5b725ad6-2eef-4687-8069-ecb3ef41efb8/uac-elev...

 

Anybody has any more ideas why it simply does NOT work for me (apart from runas only)

 

S

10 Replies

@Sebastian cerazy 

Have you tried configuring UIA elevation prompt behavior in endpoint protection device configuration in endpoint manager? Elevation prompt for standard users - "Prompt for credentials on the secure desktop" and Route elevation prompts to user's interactive desktop - "enabled"

Ofcourse that is where I have it configured:

 

endpoint-protection

Can you check if the setting is applied on the device? No conflict settings from baselines?

Yes, registry entries do exist

Okey, I will try to reproduce this behavior in lab. Will come back with results.

Anybody any input?

@Sebastian cerazy 

I have tried to recreate the same problem but do not get the same results as you. Can you take a bump on your policies and send to me? 

Exported json for Intune - Local device security options is here

 

It is the only policy that touches localSecurityOptionsStandardUserElevationPromptBehavior

 

Seb

Anybody?