We have ConsentPromptBehaviorAdmin at the highest secure level (2). Unfortunately then an administrative domain user has to enter the username, too. It is not pre-populated because the computer is joined to a domain. Bad Design! This costs a lot of time and money. Hope this can be fixed in a later servicepack. Is any workaround like a wrapper available?

Hi, When you set ConsentPromptBehaviorAdmin at the highest secure level (2), UAC was turned on for prompts administrator to approve action. You can refer this article: http://www.rawcomputing.co.uk/vistatips36.html Thus if you perform any operation on machine, UAC would prompt for administrator account. Regards, Leo HuangLeo Huang TechNet Community Support

As you see on your link the username (Roland) is pre-polulation in a workgroup or local user mode. If you use a domain-account you must enter additionally the complete username. Correction: The highest level of ConsentPromptBehaviorAdmin is 1 not 2 and we use this. 0 = Elevate without prompting 1 = Prompt for credentials on the secure desktop <- Most secure setting 2 = Prompt for consent on the secure desktop 3 = Prompt for credentials 4 = Prompt for consent 5 = Prompt for consent for non-Windows binaries <-Default