How to change the behavior of the User Account Control message - VISTA

How do I change the behavior of the User Account Control message?

An administrator can change the behavior of the User Account Control message for standard users or for local administrators in Admin Approval Mode.

Examples of situations where you might want to do so include:

• Environments where all applications must be pre-approved and installed centrally.

• Organizations that must comply with Common Criteria standards or corporate policies that require credentials be used for all administrator tasks.

Change the behavior of the User Account Control message for administrators in Admin Approval Mode

Use the following procedure to change the User Account Control message behavior for administrators.

To perform the following procedure, you must be able to log on with or provide the credentials of a member of the local Administrators group. To change the behavior of the User Account Control message for administrators in Admin Approval Mode:

Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open box, and then click OK.
If UAC is currently configured in Admin Approval Mode, the User Account Control message will appear. Click Continue.

From the Local Security Policy tree, click Local Policies, and then double-click Security Options.

Scroll down to and double-click User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode.

From the drop-down menu, select one of the following settings:

• Elevate without prompting

In this case, applications that have been marked as administrator applications, as well as applications detected as setup applications, will automatically run with the full administrator access token. All other applications will automatically run with the standard user token.

• Prompt for credentials

In this case, in order to give consent for an application to run with the full administrator access token, the user must enter administrator credentials. This setting supports compliance with Common Criteria or corporate policies.

• Prompt for consent
This is the default setting.

Click Apply.

Change the behavior of the User Account Control message for standard users

Use the following procedure to change the User Account Control message behavior for standard users.

To perform the following procedure, you must be able to log on with or provide the credentials of a member of the local Administrators group. To change the behavior of the User Account Control message for standard users

Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open text box, and then click OK.
If UAC is currently configured to prompt for administrator credentials, the User Account Control message will appear. Click Continue.

From the Local Security Policy tree, click Local Policies, and then double-click Security Options.

Scroll down and double-click User Account Control: Behavior of the elevation prompt for standard users.

From the drop-down menu, select one of the following settings:

• Automatically deny elevation requests

In this case, administrator applications will not be able to run. The user should see an error message from the application that indicates a policy has prevented the application from running.

• Prompt for credentials

This is the default setting. In this case, for an application to run with the full administrator access token, the user must enter administrator credentials.

Click Apply.

Additional Resources

• Windows Vista User Account Control Step-by-Step Guide ( http://go.microsoft.com/fwlink/?linkid=53781 )

Related topics: MSI Automation, MSI Tables Overview, MSI Command Line, Create MSI Tables, MSI Error Table, BootStrapper VISTA, MSP VISTA, Install MSI SDK Tools V3.1.4, Create CAB File, Build MSPs

Return Home - Index