Windows: require admin password/pin for UAC

This commit is contained in:
Aminda Suomalainen 2021-12-19 14:49:30 +02:00
parent 1356fccd20
commit 2d199f225c
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
3 changed files with 12 additions and 7 deletions

View File

@ -0,0 +1,5 @@
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000001
"ConsentPromptBehaviorUser"=dword:00000001

View File

@ -1,8 +1,8 @@
Windows Registry Editor Version 5.00 Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000002 "ConsentPromptBehaviorAdmin"=dword:00000001
"ConsentPromptBehaviorUser"=dword:00000002 "ConsentPromptBehaviorUser"=dword:00000001
"dontdisplaylastusername"=dword:00000000 "dontdisplaylastusername"=dword:00000000
"shutdownwithoutlogon"=dword:00000001 "shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001

View File

@ -3,14 +3,14 @@ This file is supposed to explain [Windows.reg](Windows.reg).
``` ```
Windows Registry Editor Version 5.00 Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000002 "ConsentPromptBehaviorAdmin"=dword:00000001
"ConsentPromptBehaviorUser"=dword:00000002 "ConsentPromptBehaviorUser"=dword:00000001
``` ```
* Make the file Windows Registry Editor script * Make the file Windows Registry Editor script
* Ask admins yes/no on UAC * Ask admins for password/PIN in UAC
* 1 would also ask for password, 0 disable entirely. * 2 would ask for yes or no, 0 disable entirely (don't do that).
* prompt standard users for username and password. * prompt standard users for username and password. 2021-12-19: I don't understand this or the line below.
* The other option (1) doesn't even give them UAC prompt so you must * The other option (1) doesn't even give them UAC prompt so you must
always login as admin to do anything. always login as admin to do anything.