Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

A network support technician is assisting a user remotely on a Windows 11 Professional workstation. Whenever the user attempts an operation requiring administrative privileges, the technician's remote control software displays a blank black screen instead of showing the User Account Control (UAC) elevation prompt, preventing the technician from typing administrative credentials. Which Local Security Policy setting should be disabled to allow remote viewing of UAC prompts without completely turning off UAC?

  1. User Account Control: Switch to the secure desktop when prompting for elevationAnswer
  2. B
    User Account Control: Run all administrators in Admin Approval Mode
  3. C
    User Account Control: Behavior of the elevation prompt for standard users
  4. D
    User Account Control: Only elevate executables that are signed and validated

Answer

Disabling the security policy 'User Account Control: Switch to the secure desktop when prompting for elevation' prevents UAC from switching to an isolated desktop instance that blocks unprivileged remote desktop utilities from capturing the prompt screen.
The option selecting 'User Account Control: Switch to the secure desktop when prompting for elevation' is correct because the secure desktop isolates the screen to prevent software spoofing. Third-party remote tools without specialized service hooks cannot render the secure desktop, resulting in a black screen. Disabling this specific setting forces UAC prompts to appear on the standard desktop where remote software can capture them.

Step-by-Step Solution

1
Identify the cause of the black screen during remote administration.
The secure desktop feature runs UAC prompts in a isolated system process space (Desktop context) that standard user-mode remote control agents cannot capture or render.
By default, Windows switches to the secure desktop to isolate elevation prompts from malicious software running on the user's interactive desktop.
2
Locate the targeted Local Security Policy rule in secpol.msc under Security Options.
Identify 'User Account Control: Switch to the secure desktop when prompting for elevation'.
This policy explicitly governs whether elevation prompts execute on the secure desktop or the user's interactive desktop.
3
Disable the secure desktop policy setting.
Prompts display on the standard user desktop, making them visible to the remote technician while preserving mandatory UAC credential requests.
This maintains elevation prompt requirements while resolving the remote capture conflict.

Key Concept

Windows UAC Secure Desktop Configuration and Remote Assistance Compatibility
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic