Forcing every user including administrators to authenticate during application installs
Hello all, I have a business case where all my users (200 of them) require admin privileges on their domain controlled windows 7 systems. Due to security weaknesses associated with the admin account, how can I force these accounts, in fact all accounts, to authenticate with credentials (username/password) during user application installations?
May 19th, 2012 7:34pm

Hello K0rn_1, I assume your Standard User account users will by default already be prompted by UAC for an Administrator Password if they wish to install applications. The following causes UAC to also require the same for Administrators. The following information is for a Local Group Policy, but take a look at your Group Policy which should offer the same option. I have copied the following from the course notes I have made, and which I hope may assist you. (I am unable to include graphics and please be aware that my carrier returns are unfortunately not normally saved, when posting these messages.) - - - - Copy notes start: - - - - 1) Local Computer Policy Snap-in (left pane): Computer Configuration\ Windows Settings\ Security Settings\ Local Policies\ Security Options\ 2) Security Options Policies MMC View:/ In Details pane (right), scroll down and Open: User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Policy, by doing either: Double-click it. Or: Right-click it/Properties. 3) User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Properties dialog box: Local Security Setting tab:/ Drop-down menu: Choose: Prompt for credentials/ Click: OK. - - - - End of copy notes - - - - Regards, Robert339
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2012 2:17pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics