Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

A systems administrator needs to restrict administrative elevation behavior on a standalone Windows 11 Pro workstation so that administrators are required to enter credentials on a secure desktop whenever a program requests elevated privileges. What is the correct sequence of steps to configure this policy using the Local Security Policy snap-in?

  1. 1Open the Run dialog window, type secpol.msc, and press Enter to launch the management console.
  2. 2In the left console tree, expand Local Policies and click on Security Options.
  3. 3Locate and open the policy named 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode'.
  4. 4Change the security setting drop-down menu to 'Prompt for credentials on the secure desktop' and click OK.

Answer

The correct operational sequence begins with launching the snap-in via secpol.msc, navigating to Local Policies -> Security Options, opening the policy 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode', and selecting 'Prompt for credentials on the secure desktop'.
To modify detailed UAC prompt requirements for administrator accounts on Windows Pro, a technician must open the Local Security Policy console using secpol.msc, navigate through Local Policies to Security Options, edit 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode', and select 'Prompt for credentials on the secure desktop'.

Step-by-Step Solution

1
Launch the MMC Management Snap-in
The Local Security Policy window opens.
Administrative security policies for standalone Windows workstations are managed through secpol.msc.
2
Navigate to the Security Options Policy Node
The right panel populates with granular UAC and account security policies.
UAC security settings are located under Local Policies -> Security Options.
3
Open the Administrative Elevation Behavior Policy
The policy properties dialog box opens.
This specific policy targets administrator elevation prompts specifically.
4
Configure the Security Setting and Apply
The policy is updated to require credentials on the secure desktop.
Configuring 'Prompt for credentials on the secure desktop' ensures credentials must be entered explicitly when privilege escalation occurs.

Key Concept

Configuring User Account Control (UAC) administrative prompt behavior via Windows Local Security Policy (secpol.msc)
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic