Asked by:
Applocker and UAC

Question
-
I have an application that with UAC 'ON' the user gets prompted for admin rights which is normal (which I don't want). One way to get around this is to turn UAC 'OFF'. Would Applocker work in the situation? I want to keep UAC 'ON' and NOT have the user prompted. I tried to setup Applocked but it didn't work, maybe I did something wrong or this will not work anyway...
All replies
-
This is a related article:
https://oddvar.moe/2017/08/15/research-on-cmstp-exe/
S.Sengupta,Microsoft MVP Windows and Devices for IT, Windows Insider MVP
- Proposed as answer by FarenaMicrosoft contingent staff Friday, July 26, 2019 7:58 AM
-
Hi,
All UAC does is cause an administrator to login as a standard user and then be forced to elevate when administrative privileges are required. Turning UAC off does not allow users to install software.
Applocker allows you to enforce what applications Administrators AND users can run. The default rules allow administrators to run installed software but you don't need to keep it that way.
The install itself does not need UAC and as mentioned above, user based installers already understand that.
Best Regards,
Farena
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Hi,
All UAC does is cause an administrator to login as a standard user and then be forced to elevate when administrative privileges are required. Turning UAC off does not allow users to install software.
Applocker allows you to enforce what applications Administrators AND users can run. The default rules allow administrators to run installed software but you don't need to keep it that way.
The install itself does not need UAC and as mentioned above, user based installers already understand that.
Best Regards,
Farena
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Hi,
UAC has a slider to select from four levels of notification.The slider will never turn UAC completely off.
If you set it to Never notify(Disable UAC prompts), it will:
Keep the UAC service running.
Cause all elevation request initiated by administrators to be auto-approved without showing a UAC prompt.
Automatically deny all elevation requests for standard users.
For your reference:
How User Account Control works
Best Regards,
Farena
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Hi,
UAC has a slider to select from four levels of notification.The slider will never turn UAC completely off.
If you set it to Never notify(Disable UAC prompts), it will:
Keep the UAC service running.
Cause all elevation request initiated by administrators to be auto-approved without showing a UAC prompt.
Automatically deny all elevation requests for standard users.
For your reference:
How User Account Control works
Best Regards,
Farena
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. -
Hi,
As you said, you must be logged as an administrator of this computer to select this setting.
See also: Security considerations for AppLocker
Best Regards,
Farena
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.