Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

A system administrator is configuring security baselines on standalone Windows 11 Pro workstations. Company policy dictates that standard users must never be prompted to enter administrator credentials when attempting tasks that require elevated privileges; instead, any privilege elevation attempt by a standard user must be silently rejected by default. Which Local Security Policy setting under Security Options should the administrator modify to meet this requirement?

  1. User Account Control: Behavior of the elevation prompt for standard usersAnswer
  2. B
    User Account Control: Switch to the secure desktop when prompting for elevation
  3. C
    User Account Control: Run all administrators in Admin Approval Mode
  4. D
    User Account Control: Admin Approval Mode for the Built-in Administrator account

Answer

Modify 'User Account Control: Behavior of the elevation prompt for standard users' to automatically deny elevation requests.
The policy setting 'User Account Control: Behavior of the elevation prompt for standard users' specifically controls how Windows handles privilege escalation attempts by non-administrative users. Setting this to 'Automatically deny elevation requests' ensures that standard users are blocked immediately without presenting a credential prompt.

Step-by-Step Solution

1
Identify the goal
Prevent standard users from seeing credential elevation prompts and automatically deny administrative tasks.
Security policy requires silent auto-denial for standard users attempting elevated operations.
2
Locate the relevant Windows Security policy
Navigate to Local Security Policy (secpol.msc) > Security Settings > Local Policies > Security Options.
UAC behavior settings are managed via Security Options in the Local Security Policy snap-in.
3
Select the specific UAC policy setting
Configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests'.
This policy explicitly handles standard user privilege elevation behavior.

Key Concept

Windows User Account Control (UAC) Elevation Prompt Behaviors
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic