You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The UAC promp is annoying/time consuming as we need to launch many of our tools in admin mode. Disabling it has the issue that we won't notice that malware want to get admin priviledges by UAC when launching it. I have heard there is a setting to stop it from darkening the screen and show the pop up, that may be a good solution for both cases. Alternatively we could just disable UAC promp only for apps like procmon (only if the other option is not possible).
Specific behaviors of UAC can be controlled via the local security policy. The dimming is caused by secure desktop which can be disabled in these settings while retaining the other prompts.
secpol.msc
I'd recommend we disable 'switch to descure desktop when prompting for elevation' and setting 'behavior of the elevation prompt for standard users' to 'Prompt for consent'. This leave UAC enabled, but much less annoying, and is fine for a VM security wise.
Details
The UAC promp is annoying/time consuming as we need to launch many of our tools in admin mode. Disabling it has the issue that we won't notice that malware want to get admin priviledges by UAC when launching it. I have heard there is a setting to stop it from darkening the screen and show the pop up, that may be a good solution for both cases. Alternatively we could just disable UAC promp only for apps like procmon (only if the other option is not possible).
Requires #510
The text was updated successfully, but these errors were encountered: