Examkin

Soru

Zorluk: ZorWindows Security Settings and User Account Control

A desktop support technician is configuring security settings on Windows 11 Pro workstations in a shared corporate training lab. Company security policy requires that standard user accounts are automatically denied privilege elevation without displaying a User Account Control (UAC) credential prompt. Arrange the steps in the correct order to configure and verify this policy setting.

  1. 1Open the Run dialog, type secpol.msc, and press Enter to launch the Local Security Policy console.
  2. 2In the left navigation pane, expand Security Settings, expand Local Policies, and select Security Options.
  3. 3Locate and double-click 'User Account Control: Behavior of the elevation prompt for standard users'.
  4. 4Change the local security setting value to 'Automatically deny elevation requests' and click OK.
  5. 5Sign out, log in using a standard user account, and attempt an administrative task to verify that elevation is denied without a prompt.

Cevap

The correct sequence of steps is: 1. Open the Run dialog, type secpol.msc, and press Enter to launch the Local Security Policy console. 2. In the left navigation pane, expand Security Settings, expand Local Policies, and select Security Options. 3. Locate and double-click 'User Account Control: Behavior of the elevation prompt for standard users'. 4. Change the local security setting value to 'Automatically deny elevation requests' and click OK. 5. Sign out, log in using a standard user account, and attempt an administrative task to verify that elevation is denied without a prompt.
To block standard users from elevating privileges without displaying a UAC credential prompt, a technician must open Local Security Policy (secpol.msc), navigate to Security Settings > Local Policies > Security Options, locate 'User Account Control: Behavior of the elevation prompt for standard users', set it to 'Automatically deny elevation requests', and verify enforcement by attempting an administrative task under a standard user account.

Adım Adım Çözüm

1
Launch Local Security Policy console
The secpol.msc MMC snap-in opens.
Administrative security options for standalone Windows workstations are managed through Local Security Policy.
2
Navigate to Security Options
The list of system and UAC security policies is displayed.
UAC elevation behaviors are stored under Security Settings > Local Policies > Security Options.
3
Open the Standard User Elevation Behavior Policy
The properties window for the target policy opens.
This policy specifically controls whether standard users receive a UAC credential prompt or are blocked.
4
Configure the policy to Automatically Deny elevation
Elevation requests from standard accounts will now fail automatically without prompting for credentials.
Selecting 'Automatically deny elevation requests' satisfies the compliance objective.
5
Verify enforcement with a standard user account
Attempted administrative operations fail immediately with an access denied message.
Testing validates that the policy configuration is properly enforced.

Anahtar Kavram

Configuring UAC elevation prompt behavior for standard users in Local Security Policy (secpol.msc)
Bu soruyu puanla

Konular

Windows Security Settings and User Account Control

Bu konudan daha fazla soru