Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

An IT administrator is deploying automated maintenance scripts on a Windows 11 Pro system. When these scripts execute operations requiring elevated privileges while an administrative user is logged in, execution halts due to an interactive elevation prompt appearing on the dimmed desktop. The administrator needs to adjust the Local Security Policy (secpol.msc) so that elevation requests for administrative users in Admin Approval Mode proceed automatically without user interaction or desktop dimming. Which policy setting should the administrator configure?

  1. User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode -> Elevate without promptingAnswer
  2. B
    User Account Control: Switch to the secure desktop when prompting for elevation -> Enabled
  3. C
    Credential Manager -> Windows Credentials -> Enable automatic administrative bypass
  4. D
    Local File System Security -> C:\Windows\System32 -> Modify NTFS permissions to grant Standard Users Full Control

Answer

Configure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Elevate without prompting' in Local Security Policy.
In Windows Local Security Policy (secpol.msc), configuring 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Elevate without prompting' allows applications and scripts launched by administrative accounts to automatically acquire administrative privilege tokens without halting for user consent or dimming the display.

Step-by-Step Solution

1
Open Local Security Policy console by running secpol.msc.
Navigates to the local security management snap-in.
Security policies governing UAC prompts for local accounts are managed under Security Settings.
2
Navigate to Security Settings -> Local Policies -> Security Options.
Displays all granular User Account Control policy options.
UAC policies are configured under the Local Policies Security Options node.
3
Locate 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' and set its value to 'Elevate without prompting'.
Administrative elevation requests bypass consent prompts automatically.
This configuration allows background tasks and administrative scripts to execute elevated tasks seamlessly without halting for interactive confirmation.

Key Concept

User Account Control Security Policy Elevation Behavior
Estimated Time:1m 15s
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic