Editing UAC behaviour for a particular User
I have a scenario where I need to set the behavior of the security policy "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" to "Elevate without prompting" only for a a particular user under the Administrator
group. I don't want any other user under the administrators group to have this privilege.
Is it possible to set this security policy as mentioned above ? If yes, then how do set it ?
August 16th, 2012 4:06am
To change the behavior of UAC by using Group Policy
Click Start, type secpol.msc in the
Search programs and files box, and then press ENTER.
If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click
Yes.
In the console tree, expand Local Policies, and then click
Security Options.
In the details pane, scroll down and double-click the Group Policy setting that you want to change. UAC policy settings that a local administrator can modify include:
User Account Control: Admin Approval Mode for the built-in Administrator accountUser Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktopUser Account Control: Behavior of the elevation prompt for administrators in Admin Approval ModeUser Account Control: Behavior of the elevation prompt for standard usersUser Account Control: Detect application installations and prompt for elevationUser Account Control: Only elevate executables that are signed and validatedUser Account Control: Only elevate UIAccess applications that are installed in secure locationsUser Account Control: Run all administrators in Admin Approval ModeUser Account Control: Switch to the secure desktop when prompting for elevationUser Account Control: Virtualize file and registry write failures to per-user locations
On the Properties page, make your selection, and then click
OK.
As for changing it for one admin user. I'm not sure
Free Windows Admin Tool Kit Click here and download it now
August 16th, 2012 8:31am
Thanks Ang101 for the quick reply.
I knew how to change the group policy as mentioned by you and had done the same for all the Admin users. But then we realized that it might be a security threat to do so for all Admin users. And hence wanted to know how we could do it for a particular
user.
August 17th, 2012 12:33am
Hi,
Base on my knowledge, it seems unable to set the UAC security policy for one specify admin user.
Regards,
Vincent Wang
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2012 4:40am
Hi,
Base on my knowledge, it seems unable to set the UAC security policy for one specify admin user.
Regards,
Vincent Wang
TechNet Community Support
August 17th, 2012 4:41am


