A system administrator is configuring security baselines on standalone Windows 11 Pro workstations. Company policy dictates that standard users must never be prompted to enter administrator credentials when attempting tasks that require elevated privileges; instead, any privilege elevation attempt by a standard user must be silently rejected by default. Which Local Security Policy setting under Security Options should the administrator modify to meet this requirement?
- User Account Control: Behavior of the elevation prompt for standard usersCevap
- BUser Account Control: Switch to the secure desktop when prompting for elevation
- CUser Account Control: Run all administrators in Admin Approval Mode
- DUser Account Control: Admin Approval Mode for the Built-in Administrator account
Cevap
Modify 'User Account Control: Behavior of the elevation prompt for standard users' to automatically deny elevation requests.
The policy setting 'User Account Control: Behavior of the elevation prompt for standard users' specifically controls how Windows handles privilege escalation attempts by non-administrative users. Setting this to 'Automatically deny elevation requests' ensures that standard users are blocked immediately without presenting a credential prompt.
Adım Adım Çözüm
Anahtar Kavram
Windows User Account Control (UAC) Elevation Prompt Behaviors