Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

An IT administrator is configuring Windows 11 Pro workstations located in a computer lab to prevent standard user accounts from generating credential prompts or asking for administrative credentials when running setup programs. The objective is to automatically reject elevation requests from standard users without user intervention. Which User Account Control (UAC) security option in Local Security Policy should be configured to meet this requirement?

  1. User Account Control: Behavior of the elevation prompt for standard users set to Automatically deny elevation requestsAnswer
  2. B
    User Account Control: Switch to the secure desktop when prompting for elevation set to Disabled
  3. C
    User Account Control: Run all administrators in Admin Approval Mode set to Disabled
  4. D
    User Account Control: Only elevate executable files that are signed and validated set to Enabled

Answer

Configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' in Local Security Policy (secpol.msc).
Setting 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' prevents Windows from displaying an administrative credential prompt to non-admin users, immediately returning an access denied message whenever privilege elevation is requested.

Step-by-Step Solution

1
Identify the goal of suppressing credential prompts for standard users.
Recognize that standard users should be automatically denied privilege elevation rather than prompting for administrator credentials.
By default, UAC prompts standard users for an administrator password (Prompt for credentials).
2
Locate the relevant security policy setting under Security Options in secpol.msc.
Identify 'User Account Control: Behavior of the elevation prompt for standard users'.
This specific policy explicitly controls how UAC responds when a standard user account attempts an action requiring administrative privileges.
3
Select the policy value that automatically rejects requests.
Set the value to 'Automatically deny elevation requests'.
This setting directly blocks elevation attempts without presenting a credential entry window to the standard user.

Key Concept

User Account Control (UAC) Local Security Policy Settings
Estimated Time:1m 15s
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic