User Account Control: Run all administrators in Admin Approval Mode

Information

User Account Control: Run all users, including administrators, as standard users.

This security setting determines the behavior of all UAC policies for the entire system.

The options are:

- Enabled: Admin Approval Mode and all other UAC policies are dependent on this option being enabled. Changing this setting requires a system reboot.

- Disabled: Admin Approval Mode user type and all related UAC policies will be disabled. Note: the Security Center will notify that the overall security of the operating system has been reduced.

Default: Enabled

Solution

Policy Path: Security Options
Policy Setting Name: User Account Control: Run all administrators in Admin Approval Mode

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1809-and-windows-server/ba-p/701082/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(1), CSCv6|5.1

Plugin: Windows

Control ID: 2bd5b7b9e374aa17a0f34e3ed2a807a10baad58a4c4d429fa7480446917531a4