Контроль учетных записей
GPO: Security Settings\Local Policies\Security Options
Реестр: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
| Registry Key | Group Policy setting | Registry settings |
|---|---|---|
| FilterAdministratorToken | User Account Control: Admin Approval Mode for the built-in Administrator account | 0 (Default) = Disabled 1 = Enabled |
| EnableUIADesktopToggle | User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop | 0 (Default) = Disabled 1 = Enabled |
| ConsentPromptBehaviorAdmin | User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | 0 = Elevate without prompting 1 = Prompt for credentials on the secure desktop 2 = Prompt for consent on the secure desktop 3 = Prompt for credentials 4 = Prompt for consent 5 (Default) = Prompt for consent for non-Windows binaries |
| ConsentPromptBehaviorUser | User Account Control: Behavior of the elevation prompt for standard users | 0 = Automatically deny elevation requests 1 = Prompt for credentials on the secure desktop 3 (Default) = Prompt for credentials |
| EnableInstallerDetection | User Account Control: Detect application installations and prompt for elevation | 1 = Enabled (default for home) 0 = Disabled (default for enterprise) |
| ValidateAdminCodeSignatures | User Account Control: Only elevate executables that are signed and validated | 0 (Default) = Disabled 1 = Enabled |
| EnableSecureUIAPaths | User Account Control: Only elevate UIAccess applications that are installed in secure locations | 0 = Disabled 1 (Default) = Enabled |
| EnableLUA | User Account Control: Run all administrators in Admin Approval Mode | 0 = Disabled 1 (Default) = Enabled |
| PromptOnSecureDesktop | User Account Control: Switch to the secure desktop when prompting for elevation | 0 = Disabled 1 (Default) = Enabled |
| EnableVirtualization | User Account Control: Virtualize file and registry write failures to per-user locations | 0 = Disabled 1 (Default) = Enabled |
Таблица для подбора нужных параметров DWORD:
| ConsentPromptBehaviorAdmin | EnableLUA | PromptOnSecureDesktop | |
|---|---|---|---|
| Никогда не уведомлять | 0 | 1 | 0 |
| Уведомлять без затемнения экрана | 5 | 1 | 0 |
| Уведомлять при попытках приложений изменить параметры | 5 | 1 | 1 |
| Всегда уведомлять | 2 | 1 | 1 |
Включить UAC:
C:\Windows\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f