Monday, August 31, 2015

security - Silently Skip Windows 7 UAC Prompts?


NOTE: I am not trying to disable UAC.


I have a Windows 7 machine where I've added one administrator account and one regular user account. When using the regular user account, a UAC dialog will show up having a password prompt when an application requires administrative privileges. Entering the administrator's password will allow the action to continue, but this is not the behavior that I require. Instead of prompting for the password, I would like the action to either silently fail (with the action logged in the system log) or show a permission denied dialog.


Is this possible? If so, how do I do it?


Answer



You can change how UAC acts in this scenario by using Security Policies:


Instructions from here:



Follow these steps to eliminate UAC prompts for standard users:



  • Click on the start menu, type "secpol.msc" and hit Enter.

  • When the "Local Security Policy" editor ("snap-in") opens, double-click on "Local Policies" -for those affecting this particular
    machine- and double-click on "Security Options".

  • Scroll down until you see a node labeled "User Account Control: Behavior of the Elevation Prompt for Standard Users" (careful, another
    policy starts with the same name, but actually affects computer
    administrators!) Double-click on it and the following dialog will
    open:


enter image description here



  • The default behavior for standard users, selected in the dropdown menu pictured above, is "Prompt for credentials": whenever elevated
    privileges are required, they'll need to select an administrator and
    enter its password in a UAC prompt to proceed with the action.

  • Click on the dropdown, and select the "Automatically deny elevation requests" option instead; click "OK" to apply the new setting: from
    this point on, standard users won't event get a UAC prompt when they
    attempt any task that needs administrative permissions.



See the link for extended information.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...