A systems administrator needs to enforce specific administrative privilege policies on standalone Windows 11 Pro workstations. Specifically, the administrator must configure User Account Control (UAC) settings so that built-in administrative accounts are explicitly prompted for credentials on the Secure Desktop whenever an elevation request occurs. Which tool should the administrator open to modify these detailed UAC security options?
- Local Security Policy (secpol.msc)Answer
- BComputer Management (compmgmt.msc)
- CCredential Manager
- DFolder Security Properties (NTFS Permissions)
Answer
Local Security Policy (secpol.msc) is the correct tool for configuring detailed User Account Control security policies and elevation prompt behaviors.
The Local Security Policy console (secpol.msc) provides administrative access to Local Policies and Security Options in Windows Professional and higher editions. Under the Security Options folder, administrators can configure specific User Account Control settings, including requiring credential prompts on the Secure Desktop for administrative accounts during privilege elevation.
Step-by-Step Solution
Key Concept
Windows Local Security Policy (secpol.msc) and UAC Policy Configuration