Examkin

Question

Difficulty: Very hardWindows Security Settings and User Account Control

A systems administrator is configuring remote support capabilities on standalone Windows 11 Pro workstations. During remote management sessions, the helpdesk technician notices that whenever an action requires elevated administrative privileges, the remote screen turns black and becomes non-responsive, preventing the technician from seeing or interacting with the elevation prompt. Local security policy mandates that User Account Control (UAC) elevation prompts must remain active for all administrative tasks. Which of the following Local Security Policy settings should the administrator modify to resolve the remote screen blackout issue while maintaining elevation prompts?

  1. Disable 'User Account Control: Switch to the secure desktop when prompting for elevation'.Answer
  2. B
    Set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to Elevate without prompting.
  3. C
    Open Credential Manager in Control Panel and clear all stored Windows Credentials for the administrative account.
  4. D
    Upgrade the workstations from Windows 11 Pro to Enterprise edition to enable remote elevation support in Local Security Policy.

Answer

Disable 'User Account Control: Switch to the secure desktop when prompting for elevation'.
When User Account Control prompts for administrative elevation, Windows by default dims the screen and transfers focus to the Secure Desktop—an isolated context accessible only by trusted system components. Standard remote support and screen-sharing utilities often lack the necessary privileges to render or accept input on the Secure Desktop, resulting in a blank or frozen remote view. Disabling 'User Account Control: Switch to the secure desktop when prompting for elevation' causes prompts to render on the active user's desktop, enabling remote technicians to view and respond to UAC prompts while keeping prompt verification fully active.

Step-by-Step Solution

1
Diagnose the cause of the screen blackout during remote UAC elevation requests.
By default, Windows switches to the Secure Desktop (Winlogon desktop) to present UAC prompts. Most remote support software without system-level UIAccess cannot capture or send input to the Secure Desktop, causing the remote display to go black.
The Secure Desktop protects elevation prompts from malware screen-scraping and synthetic input.
2
Evaluate administrative security constraints.
UAC elevation prompts must remain enabled for administrator accounts.
Silently elevating administrative requests violates organizational compliance rules.
3
Reconfigure the Local Security Policy setting.
Disabling 'User Account Control: Switch to the secure desktop when prompting for elevation' presents UAC prompts on the interactive user desktop rather than the isolated Secure Desktop.
This allows remote desktop software to view and process UAC prompts without disabling elevation security.

Key Concept

User Account Control Secure Desktop isolation and Local Security Policy configuration
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic