User Account Control: Switch to the secure desktop when prompting for elevationID: oval:org.secpod.oval:def:8715 | Date: (C)2013-01-21 (M)2023-05-09 |
Class: COMPLIANCE | Family: windows |
The User Account Control: Switch to the secure desktop when prompting for elevation setting should be configured correctly.
This policy setting controls whether the elevation request prompt is displayed on the interactive users desktop or the secure desktop. The options are: * Enabled: (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users. * Disabled: All elevation requests go to the interactive users desktop. Prompt behavior policy settings for administrators and standard users are used.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\User Account Control: Switch to the secure desktop when prompting for elevation
(2) KEY: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDesktop
Platform: |
Microsoft Windows Server 2008 R2 |