UAC changeable in policies??

[Guest]

Hi Folks. I was noticing that some MS certs are strating to come out for
Vista and saw that measure up had a practice test for one of them. Going
through the demo questions I saw a question regarding the pop-ups from UAC.
The question asks how you can prevent uac from popping up whenever an admin
is making a configuration change. To my knowledge you couldnt unless you
disable UAC, but measure up had a different answer.

---You should change the behavior of the elevation prompt for administrators
in UAC Admin Approval Mode. UAC is a new feature in Windows Vista that
prevents unauthorized configuration changes and silent installations. The
message that is displayed confirms a user's decision to make configuration
changes. This helps prevent viruses from making changes to a user's computer
in the security context of the user but without the user's permission. To
change the elevation prompt behavior, open the Local Security Policy snap-in
from the Administrative Tools Control Panel applet. Then open the User
Account Control: Behavior of the elevation prompt for administrators in Admin
Approval Mode policy. Change the policy setting from Prompt for consent to No
prompt. With this setting, the UAC message will not be displayed whenever
Joyce attempts to make configuration changes that require administrative
privileges. ---

I looked all over my local policies and cant find anything dealing with UAC.
I realize that the test was probably made off of a beta version of vista,
but I wanted to check and see if anyone else was able to get this to work.
Perhaps I just have a setting configured wrong some place. It would be nice
if this really worked. Please post if you can.

 

[Dave R.]

Hi Folks. I was noticing that some MS certs are strating to come out
for
Vista and saw that measure up had a practice test for one of them.
Going
through the demo questions I saw a question regarding the pop-ups from
UAC.
The question asks how you can prevent uac from popping up whenever an
admin
is making a configuration change. To my knowledge you couldnt unless
you
disable UAC, but measure up had a different answer.

---You should change the behavior of the elevation prompt for
administrators
in UAC Admin Approval Mode. UAC is a new feature in Windows Vista that
prevents unauthorized configuration changes and silent installations.
The
message that is displayed confirms a user's decision to make
configuration
changes. This helps prevent viruses from making changes to a user's
computer
in the security context of the user but without the user's permission.
To
change the elevation prompt behavior, open the Local Security Policy
snap-in
from the Administrative Tools Control Panel applet. Then open the User
Account Control: Behavior of the elevation prompt for administrators
in Admin
Approval Mode policy. Change the policy setting from Prompt for
consent to No
prompt. With this setting, the UAC message will not be displayed
whenever
Joyce attempts to make configuration changes that require
administrative
privileges. ---

I looked all over my local policies and cant find anything dealing
with UAC.
I realize that the test was probably made off of a beta version of
vista,
but I wanted to check and see if anyone else was able to get this to
work.
Perhaps I just have a setting configured wrong some place. It would
be nice
if this really worked. Please post if you can.

It's there for me in Vista Business - Local Security Policy: Local
Policies - Security Options - User Account Control: Behavior of the
elevation prompt for administrators in Admin Approval Mode. Options are
Elevate without prompting, Prompt for credentials, and Prompt for
consent (the default).

There are several other policies that control UAC behavior in there as
well.

Best regards,

Dave

 

[Jane C]

That is configurable via Local Security Policy - secpol - which is not
included in Home editions of Vista.

 

[Pipboy]

It's there for me in Vista Business - Local Security Policy: Local
Policies - Security Options - User Account Control: Behavior of the
elevation prompt for administrators in Admin Approval Mode. Options are
Elevate without prompting, Prompt for credentials, and Prompt for
consent (the default).

It's probably not in the Home version just like some of the snapins aren't
on the Home version of XP compared to Pro. I'll have to check that out when
I boot into Vista Home next.

 

[Dave R.]

It's probably not in the Home version just like some of the snapins
aren't
on the Home version of XP compared to Pro. I'll have to check that out
when
I boot into Vista Home next.

That's true, the Local Security Policy snapin (secpol.msc) isn't
included in the Home versions of Vista. (I still don't understand the
reasoning behind that one...) But from the OP's description of looking
"all over my local policies", I mentally read "local *security*
policies" and missed that he might be running a Home version.

Regards,

Dave