Forum Discussion

andreaskrovel's avatar
andreaskrovel
Copper Contributor
Mar 23, 2022

UAC elevation prompt for standard users

MSFT Windows 10 21H2 - Computer have the following setting recommendation   Policy: User Account Control: Behavior of the elevation prompt for standard users   Setting: Automatically deny elevation...
andreaskrovel's avatar
andreaskrovel
Copper Contributor
Mar 28, 2022
The problem isn't making exceptions in GPO or Intune for this setting, but how I manage the clients if this setting is set to Automatically deny elevation requests
rahuljindal's avatar
rahuljindal
Bronze Contributor
Mar 28, 2022
Ok, in that case the available options that comes to my mind are switching user to admin account or elevating permissions on demand for a standard user using a 3rd party script or an app. Make me an admin is an example.
  • AaronMargosis_Tanium's avatar
    AaronMargosis_Tanium
    Iron Contributor
    Mar 28, 2022
    If you absolutely need to log in to an interactive desktop on the target system to perform the administrative actions, then switch-user and log in with that admin account. UAC different-user elevation is MUCH less secure. Keep that option disabled.

Resources