Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configuration: UAC promp only pop up #511

Open
Ana06 opened this issue Oct 12, 2023 · 1 comment
Open

Configuration: UAC promp only pop up #511

Ana06 opened this issue Oct 12, 2023 · 1 comment
Labels
💎 enhancement It is working, but it could be better ❔ discussion Further discussion is needed

Comments

@Ana06
Copy link
Member

Ana06 commented Oct 12, 2023

Details

The UAC promp is annoying/time consuming as we need to launch many of our tools in admin mode. Disabling it has the issue that we won't notice that malware want to get admin priviledges by UAC when launching it. I have heard there is a setting to stop it from darkening the screen and show the pop up, that may be a good solution for both cases. Alternatively we could just disable UAC promp only for apps like procmon (only if the other option is not possible).

Requires #510

@Ana06 Ana06 added 💎 enhancement It is working, but it could be better ❔ discussion Further discussion is needed labels Oct 12, 2023
@stevemk14ebr
Copy link

stevemk14ebr commented Nov 20, 2023

Specific behaviors of UAC can be controlled via the local security policy. The dimming is caused by secure desktop which can be disabled in these settings while retaining the other prompts.

secpol.msc
image

I'd recommend we disable 'switch to descure desktop when prompting for elevation' and setting 'behavior of the elevation prompt for standard users' to 'Prompt for consent'. This leave UAC enabled, but much less annoying, and is fine for a VM security wise.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
💎 enhancement It is working, but it could be better ❔ discussion Further discussion is needed
Projects
None yet
Development

No branches or pull requests

2 participants