Re: UAC Questions

To configure the UAC prompting behavior for administrators
1.. Log on to a Windows Vista computer with an administrator account in
Admin Approval Mode.
2.. Click the Start button, click Run, type secpol.msc, and then click OK.
3.. At the User Account Control dialog box for the Microsoft Management
Console, click Continue.
4.. In Local Security Settings, expand Local Security Settings, expand
Local Policies, and then expand Security Options.
5.. Right click the User Account Control: Behavior of the elevation prompt
for administrators in Admin Approval Mode setting and select Properties.
Note
For most situations, the No Prompt setting is NOT recommended. No prompt
elevation would permit UAC applications to launch administrator applications
without your knowledge or consent.

The following procedure details how to configure the User Account Control:
Behavior of the elevation prompt for standard users setting. This task can
be performed by standard users and administrators, but the following
procedure details the process for an administrator in Admin Approval Mode.

To configure the UAC prompting behavior for standard users
1.. Click the Start button, click Run, type secpol.msc, and then click OK.
2.. At the User Account Control dialog box for the Microsoft Management
Console, click Continue.
3.. In Local Security Settings, expand Local Security Settings, expand
Local Policies, and then expand Security Options.
4.. Right click the User Account Control: Behavior of the elevation prompt
for standard users setting and select Properties.
The following table describes the User Account Control: Behavior of the
elevation prompt for administrators in Admin Approval Mode and the User
Account Control: Behavior of the elevation prompt for standard users
settings.

Consent policy for elevation
Setting Description Default Value
User Account Control: Behavior of the elevation prompt for
administrators in Admin Approval Mode
There are three possible values:

1. No prompt - The elevation occurs automatically and silently.

2. Prompt for consent - UAC asks for consent before elevating.

3.
Prompt for credentials - UAC requires valid administrator
credentials are entered before elevating. This policy is only in effect when
UAC is enabled.



Prompt for consent

User Account Control: Behavior of the elevation prompt for standard
users There are two possible values:

1.
No prompt - No elevation prompt is presented and the user cannot
perform administrative tasks without using Run as administrator or by
logging on with an administrator account.

2. Prompt for credentials - UAC requires that valid
administrator credentials are entered before elevating.



Prompt for credentials


Changing the behavior of the UAC elevation prompt should be done with
careful consideration. This policy is configurable for both administrators
in Admin Approval Mode and standard users. The following general guidance
can help you determine how to configure the UAC prompting behavior for your
environment.


--
Chris


begin 666 aa906022.note(en-us,MSDN.10).gif
M1TE&.#EA"@`*`+/_`(V,C?__S/_,`/\%!?]=7<# P-/3T\# P(6%A0("`@``
M`````````````````````"'Y! $```4`+ `````*``H`0 0H$,AI#AD@Z)U*
AR1HB)(8'<N,7&EJG;JV P4GZ&@D2(";<>HF@,.B)```[
`
end

.