Share via


UAC prompt for Task Manager with Non admin users

Question

Thursday, January 11, 2018 1:58 PM

Hi,

Is there any way to disabled the UAC Prompt for Non-admin users without downgrading UAC level in config panel ?

The UAC GPO seems not have enough parameters for that, and I don't want to create an schedule task and an shorcut to launch it for that..

Regards

All replies (9)

Thursday, January 11, 2018 3:52 PM ✅Answered

I made same conclusion that you wrote except for the last option :

Local Policies/Security Options:

User Account Control: Behavior of the elevation prompt for standard

users = Automatically deny elevation requests

In reality, if you enable this option by GPO, an non admin user cannot open task manager, it's forbidden.
The only way is to right click and "run as administrator".

I tried this few hours ago :)


Thursday, January 11, 2018 3:49 PM

Hi,

 

Am 11.01.2018 um 14:58 schrieb Frédéric.G:

> Is there any way to disabled the UAC Prompt for Non-admin users without

> downgrading UAC level in config panel ?

 

UAC does not work on file base.

It´s off or on, and if its on it is configured for all to behave in the

same way.

 

Local Policies/Security Options:

User Account Control: Behavior of the elevation prompt for standard

users = Automatically deny elevation requests

 

Mark

--

Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management

 

Homepage:  http://www.gruppenrichtlinien.de - deutsch

Aktuelles: https://www.facebook.com/Gruppenrichtlinien/

 

GET Privacy and DISABLE Telemetry on Windows 10 - gp-pack PaT

http://www.gruppenrichtlinien.de/artikel/gp-pack-pat-privacy-and-telemetry/

 


Friday, January 12, 2018 8:37 AM

Am 11.01.2018 um 16:52 schrieb Frédéric.G:

> In reality, if you enable this option by GPO, an non admin user cannot

> open task manager, it's forbidden.

 

Right, Thanks. That setting is the recommendation from the Security

Baseline (New Name: Microsoft Security Compliance Toolkit).

 

I configure it always to "Prompt for elevation ...". to get an

"automatic runas"

 

Mark

--

Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management

 

Homepage:  http://www.gruppenrichtlinien.de - deutsch

Aktuelles: https://www.facebook.com/Gruppenrichtlinien/

 

GET Privacy and DISABLE Telemetry on Windows 10 - gp-pack PaT

http://www.gruppenrichtlinien.de/artikel/gp-pack-pat-privacy-and-telemetry/

 


Friday, January 12, 2018 8:47 AM

Hi,

On my lab machine, Windows 10 1709, standard privilege user account could launch the Task Manager without UAC prompt and my UAC leave is higher.

Here is my UAC group policy settings, check yours:

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Friday, January 12, 2018 8:51 AM

Oh...let's try !

:)


Friday, January 12, 2018 9:06 AM

Seems not working on my W10 1607 lab.

An non admin user still have prompt password to open task manager

Edit:

The GPO you have is setting up to enable prompt credentials for non admin user...


Monday, January 15, 2018 7:37 AM

I have check Windows 10 1607, 1703 and 1709, all of them doesn't ask Admin permission to launch the Task Manager.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Monday, January 15, 2018 9:22 AM

What UAC's level do you configure?

I'm level 3


Tuesday, January 16, 2018 9:49 AM

I have tried 3 and 4.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].