Configuring UAC Secure Desktop settings for specific applications

Computer ConfigurationWindows SettingsLocal PoliciesSecurity Options

User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop.

 

 

SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystemEnableUIADesktopToggle

 

This security setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts being used by a standard user.

If you enable this setting, UIA programs including Windows Remote Assistance can automatically disable the secure desktop for elevation prompts. Unless you have also disabled elevation prompts, the prompts will appear on the interactive user’s desktop instead of the secure desktop.

If you disable or do not configure this setting, the secure desktop can only be disabled by the user of the interactive desktop or by disabling the "User Account Control: Switch to the secure desktop when prompting for elevation" setting.

UIA programs are designed to interact with Windows and application programs on behalf of a user. This setting allows UIA programs to bypass the secure desktop to increase usability in certain cases, but allowing elevation requests to appear on the regular interactive desktop instead of the secure desktop increases your security risk.

Since UIA programs must be able to respond to prompts regarding security issues, such as the UAC elevation prompt, UIA programs must be highly trusted. In order to be considered trusted, a UIA program must be digitally signed. By default, UIA programs can be run only from the following protected paths:
                ..Program Files (and subfolders)
                ..Program Files (x86) (and subfolders, in 64-bit versions of Windows only)
..WindowsSystem32

The requirement to be in a protected path can be disabled by the "User Account Control: Only elevate UIAccess applications that are installed in secure locations" setting.

While this setting applies to any UIA program, it will be used primarily in certain Windows Remote Assistance scenarios. The Windows Remote Assistance program in Windows Vista is a UIA program.

If a user requests remote assistance from an administrator and the remote assistance session is established, any elevation prompts appear on the interactive user’s secure desktop and the administrator’s remote session is paused. To avoid pausing the remote administrator’s session during elevation requests, ,the user may select the "Allow IT Expert to respond to User Account Control prompts" check box when setting up the remote assistance session. However, selecting this check box itself requires  that the interactive user respond to an elevation prompt on the secure desktop. If the interactive user is a standard user, the user does not have the required credentials to allow elevation.

If you enable this setting, ("User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop”), , requests for elevation are automatically sent to the interactive desktop (not the secure desktop) and also appear on the remote administrator’s view of the desktop during a Windows Remote Assistance session, and the remote administrator is able to provide the appropriate credentials for elevation.

This setting does not change the behavior of the UAC elevation prompt for administrators.

If you plan to enable this setting, you should also review the effect of the "User Account Control: Behavior of the elevation prompt for standard users" setting. If it is configured as "Automatically deny elevation requests" elevation requests will not be presented to the user.

 

5 thoughts on “Configuring UAC Secure Desktop settings for specific applications”

  1. http://www.globallaptopbatteries.co.uk/dell/inspiron-8600.htm Dell inspiron 8600 battery http://www.globallaptopbatteries.co.uk/dell/inspiron-b120.htm Dell inspiron b120 battery http://www.globallaptopbatteries.co.uk/dell/inspiron-b130.htm Dell inspiron b130 battery http://www.globallaptopbatteries.co.uk/dell/kg046.htm Dell kg046 battery http://www.globallaptopbatteries.co.uk/dell/latitude-d410.htm Dell latitude d410 battery http://www.globallaptopbatteries.co.uk/dell/latitude-d420.htm Dell latitude d420 battery http://www.globallaptopbatteries.co.uk/dell/latitude-d430.htm Dell latitude d430 battery http://www.globallaptopbatteries.co.uk/dell/latitude-d610.htm Dell latitude d610 battery http://www.globallaptopbatteries.co.uk/dell/latitude-d810.htm Dell latitude d810 battery http://www.globallaptopbatteries.co.uk/dell/pg043.htm Dell pg043 battery http://www.globallaptopbatteries.co.uk/dell/precision-m70.htm Dell precision m70 battery http://www.globallaptopbatteries.co.uk/dell/vostro-1310.htm Dell vostro 1310 battery http://www.globallaptopbatteries.co.uk/dell/vostro-1320.htm Dell vostro 1320 battery http://www.globallaptopbatteries.co.uk/dell/vostro-1510.htm Dell vostro 1510 battery http://www.globallaptopbatteries.co.uk/dell/vostro-1520.htm Dell vostro 1520 battery http://www.globallaptopbatteries.co.uk/dell/vostro-2510.htm Dell vostro 2510 battery http://www.globallaptopbatteries.co.uk/hp/f2024.htm Hp f2024 battery http://www.globallaptopbatteries.co.uk/hp/f2024a.htm Hp f2024a battery http://www.globallaptopbatteries.co.uk/hp/f2024b.htm Hp f2024b battery http://www.globallaptopbatteries.co.uk/hp/f2111.htm Hp f2111 battery http://www.globallaptopbatteries.co.uk/hp/hstnn-db63.htm Hp hstnn-db63 battery http://www.globallaptopbatteries.co.uk/hp/hstnn-db64.htm Hp hstnn-db64 battery http://www.globallaptopbatteries.co.uk/hp/hstnn-ob71.htm Hp hstnn-ob71 battery http://www.globallaptopbatteries.co.uk/hp/hstnn-xb70.htm Hp hstnn-xb70 battery http://www.globallaptopbatteries.co.uk/hp/nc4200.htm Hp nc4200 battery http://www.globallaptopbatteries.co.uk/hp/nc4400.htm Hp nc4400 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-dv2133.htm Hp pavilion dv2133 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-dv3000.htm Hp pavilion dv3000 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-dv3500.htm Hp pavilion dv3500 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-n5130.htm Hp pavilion n5130 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-n5140.htm Hp pavilion n5140 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-n5150.htm Hp pavilion n5150 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-n5170.htm Hp pavilion n5170 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-n5190.htm Hp pavilion n5190 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-n5200.htm Hp pavilion n5200 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-tx1000.htm Hp pavilion tx1000 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-tx1100.htm Hp pavilion tx1100 battery http://www.globallaptopbatteries.co.uk/hp/pavilion-tx2000.htm Hp pavilion tx2000 battery http://www.globallaptopbatteries.co.uk/hp/tc4200.htm Hp tc4200 battery http://www.globallaptopbatteries.co.uk/hp/tc4400.htm Hp tc4400 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-r50.htm Ibm thinkpad r50 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-t20.htm Ibm thinkpad t20 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-t21.htm Ibm thinkpad t21 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-t22.htm Ibm thinkpad t22 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-t23.htm Ibm thinkpad t23 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-t42.htm Ibm thinkpad t42 battery

  2. http://www.globallaptopbatteries.co.uk/ibm/thinkpad-t43.htm Ibm thinkpad t43 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-x20.htm Ibm thinkpad x20 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-x200.htm Ibm thinkpad x200 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-x21.htm Ibm thinkpad x21 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-x22.htm Ibm thinkpad x22 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-x23.htm Ibm thinkpad x23 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-X40.htm Ibm thinkpad X40 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-x60.htm Ibm thinkpad x60 battery http://www.globallaptopbatteries.co.uk/ibm/thinkpad-z60t.htm Ibm thinkpad z60t battery http://www.globallaptopbatteries.co.uk/msi/bty-s11.htm Msi bty-s11 battery http://www.globallaptopbatteries.co.uk/msi/bty-s12.htm Msi bty-s12 battery http://www.globallaptopbatteries.co.uk/msi/wind-u100.htm Msi wind u100 battery http://www.globallaptopbatteries.co.uk/msi/wind-u90.htm Msi wind u90 battery http://www.globallaptopbatteries.co.uk/sony/vgp-bps5.htm Sony vgp-bps5 battery http://www.globallaptopbatteries.co.uk/sony/vgp-bps5a.htm Sony vgp-bps5a battery http://www.globallaptopbatteries.co.uk/toshiba/pa3123u-1brs.htm Toshiba pa3123u-1brs battery http://www.globallaptopbatteries.co.uk/toshiba/pa3178u-1bas.htm Toshiba pa3178u-1bas battery http://www.globallaptopbatteries.co.uk/toshiba/pa3178u-1brs.htm Toshiba pa3178u-1brs battery http://www.globallaptopbatteries.co.uk/toshiba/pa3211u-1bas.htm Toshiba pa3211u-1bas battery http://www.globallaptopbatteries.co.uk/toshiba/pa3211u-1brs.htm Toshiba pa3211u-1brs battery http://www.globallaptopbatteries.co.uk/toshiba/pa3479u-1brs.htm Toshiba pa3479u-1brs battery http://www.globallaptopbatteries.co.uk/toshiba/pa3480u-1brs.htm Toshiba pa3480u-1brs battery http://www.globallaptopbatteries.co.uk/toshiba/pa3591u-1bas.htm Toshiba pa3591u-1bas battery http://www.globallaptopbatteries.co.uk/toshiba/pa3634u-1bas.htm Toshiba pa3634u-1bas battery http://www.globallaptopbatteries.co.uk/toshiba/pa3635u-1bam.htm Toshiba pa3635u-1bam battery http://www.globallaptopbatteries.co.uk/toshiba/pa3635u-1brm.htm Toshiba pa3635u-1brm battery http://www.globallaptopbatteries.co.uk/toshiba/pa3638u-1bap.htm Toshiba pa3638u-1bap battery http://www.globallaptopbatteries.co.uk/acer/batsqu410.htm acer batsqu410 battery http://www.globallaptopbatteries.co.uk/acer/sq-1100.htm acer sq-1100 battery http://www.globallaptopbatteries.co.uk/acer/sq-2100.htm acer sq-2100 battery http://www.globallaptopbatteries.co.uk/acer/squ-202.htm acer squ-202 battery http://www.globallaptopbatteries.co.uk/acer/squ-405.htm acer squ-405 battery http://www.globallaptopbatteries.co.uk/acer/squ-406.htm acer squ-406 battery http://www.globallaptopbatteries.co.uk/acer/squ-410.htm acer squ-410 battery http://www.globallaptopbatteries.co.uk/mitac/bp-8089.htm mitac bp-8089 battery http://www.globallaptopbatteries.co.uk/mitac/bp-8089p.htm mitac bp-8089p battery http://www.globallaptopbatteries.co.uk/mitac/bp-8389.htm mitac bp-8389 battery http://www.globallaptopbatteries.co.uk/sony/vgp-bpl9.htm sony vgp-bpl9 battery http://www.globallaptopbatteries.co.uk/sony/vgp-bps10.htm sony vgp-bps10 battery http://www.globallaptopbatteries.co.uk/sony/vgp-bps8.htm sony vgp-bps8 battery http://www.globallaptopbatteries.co.uk/sony/vgp-bps8a.htm sony vgp-bps8a battery http://www.globallaptopbatteries.co.uk/sony/vgp-bps9.htm sony vgp-bps9 battery http://www.globallaptopbatteries.co.uk/toshiba/pa3369u-1bas.htm toshiba pa3369u-1bas battery http://www.globallaptopbatteries.co.uk/toshiba/pa3369u-1brs.htm toshiba pa3369u-1brs battery

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s