Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

A helpdesk technician is remotely assisting a user on a Windows 11 Pro computer using a third-party screen sharing utility. When the technician attempts to perform an administrative task that triggers privilege elevation, the remote management software displays a black screen and prevents the technician from viewing or clicking the elevation dialog. Which of the following settings should be modified to resolve this issue while maintaining overall User Account Control functionality?

  1. Disable the secure desktop feature for User Account Control prompts.Answer
  2. B
    Modify the local NTFS permissions on consent.exe to grant Full Control to the helpdesk account.
  3. C
    Upgrade the OS to Windows 11 Enterprise because Windows 11 Pro lacks remote elevation prompt support.
  4. D
    Adjust the application installation compatibility permissions in Control Panel to bypass privileges.

Answer

Disable the secure desktop feature for User Account Control prompts.
The option recommending disabling the secure desktop feature resolves the issue because UAC elevation prompts normally switch execution to an isolated desktop (Secure Desktop) running under the Local System account. Many third-party remote administration applications lack the privileges required to capture or send input to the Secure Desktop. Disabling the secure desktop option allows the prompt to appear on the standard user desktop where the remote tool can capture the window.

Step-by-Step Solution

1
Identify the cause of the black screen during remote administration.
By default, UAC prompts render on the Secure Desktop, an isolated virtual desktop mode running in System context that blocks non-SYSTEM remote capture software.
The Secure Desktop protects elevation prompts from malicious process injection and unauthorized remote screen capturing.
2
Determine the configuration setting to adjust UAC prompt rendering.
Disabling 'Switch to the secure desktop when prompting for elevation' (or configuring UAC to 'Do not dim my desktop') forces prompts onto the active user desktop.
This enables remote assistance tools to capture the dialog window while keeping UAC active for privilege requests.

Key Concept

User Account Control Secure Desktop Isolation
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic