Examkin

Soru

Zorluk: OrtaWindows Security Settings and User Account Control

A network administrator is configuring security policies for corporate Windows 11 Pro workstations. To mitigate the risk of users attempting unauthorized software installations, the administrator wants standard user accounts to be completely restricted from receiving credential prompt pop-ups when elevation is requested; instead, all elevation requests from standard users must fail automatically. Which User Account Control (UAC) security policy setting should be modified in Local Security Policy?

  1. User Account Control: Behavior of the elevation prompt for standard users — set to Automatically deny elevation requestsCevap
  2. B
    User Account Control: Switch to the secure desktop when prompting for elevation — set to Disabled
  3. C
    User Account Control: Run all administrators in Admin Approval Mode — set to Disabled
  4. D
    User Account Control: Admin Approval Mode for the Built-in Administrator account — set to Enabled

Cevap

Configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' in Local Security Policy.
Setting 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' enforces a strict policy where standard user accounts cannot elevate privileges or be presented with a credential prompt dialog, immediately failing any process requiring administrative rights.

Adım Adım Çözüm

1
Identify the target requirement.
Standard user accounts must be prevented from seeing credential prompts and have elevation requests denied automatically.
The administrator wishes to eliminate helpdesk friction and prevent unauthorized administrative attempts by standard users.
2
Open Local Security Policy (secpol.msc) and navigate to Security Settings > Local Policies > Security Options.
Access the granular User Account Control policy options.
UAC behavior settings are managed centrally via Security Options in Windows Professional, Enterprise, and Education editions.
3
Locate 'User Account Control: Behavior of the elevation prompt for standard users' and change its value to 'Automatically deny elevation requests'.
Elevation requests initiated by standard users fail silently or with an automatic access denied notification without showing a password entry dialog.
This policy directly controls standard user UAC elevation behavior.

Anahtar Kavram

User Account Control Elevation Behavior Policies for Standard Users
Bu soruyu puanla

Konular

Windows Security Settings and User Account Control

Bu konudan daha fazla soru