Question

Difficulty: MediumWindows Security Settings and User Account Control

A systems administrator needs to enforce specific administrative privilege policies on standalone Windows 11 Pro workstations. Specifically, the administrator must configure User Account Control (UAC) settings so that built-in administrative accounts are explicitly prompted for credentials on the Secure Desktop whenever an elevation request occurs. Which tool should the administrator open to modify these detailed UAC security options?

  1. Local Security Policy (secpol.msc)Answer
  2. B
    Computer Management (compmgmt.msc)
  3. C
    Credential Manager
  4. D
    Folder Security Properties (NTFS Permissions)

Answer

Local Security Policy (secpol.msc) is the correct tool for configuring detailed User Account Control security policies and elevation prompt behaviors.
The Local Security Policy console (secpol.msc) provides administrative access to Local Policies and Security Options in Windows Professional and higher editions. Under the Security Options folder, administrators can configure specific User Account Control settings, including requiring credential prompts on the Secure Desktop for administrative accounts during privilege elevation.

Step-by-Step Solution

1
Identify the administrative task
The requirement is to configure granular UAC policies such as administrative elevation prompt behavior.
Standard UAC slider controls in Control Panel only offer basic level adjustments, whereas specific security policies require advanced management snap-ins.
2
Locate the appropriate administrative management snap-in
Access secpol.msc to navigate to Security Settings > Local Policies > Security Options.
This location houses policies such as 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode'.

Key Concept

Windows Local Security Policy (secpol.msc) and UAC Policy Configuration
Rate this question