User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktopID: oval:org.secpod.oval:def:22364 | Date: (C)2015-01-07 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user.
- Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts. If you do not disable the 'User Account Control: Switch to the secure desktop when prompting for elevation' policy setting, the prompts appear on the interactive user's desktop instead of the secure desktop.
- Disabled: (Default) The secure desktop can be disabled only by the user of the interactive desktop or by disabling the 'User Account Control: Switch to the secure desktop when prompting for elevation' policy setting.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System!EnableUIADesktopToggle
Platform: |
Microsoft Windows 8.1 |