UAC is turned off, but my standard account still allows elevation via UAC pop up?
I am using Windows 7. UAC is turned off (dragged to the lowest setting).
I created a standard account and try to delete some files that requires administrative permission. In a Win XP LUA account there would be no such pop up.
However, on Win 7, I am given the option to type in my Administrative password and delete the files. The pop up does not even have a dimmed background, which I believe is less secure. Same thing happens when I try to write to the Startup folder.
Is there a way to default-deny an elevation pop up in a standard account so it will be like XP? (So everything would be denied and the only way for elevation is through a SuRun elevation)
Thank you in advance!
EDIT: Nevermind, Group Policy=> Computer Config=> Windows Settings=>Security Settings=> Local Policies=> User Account Control => Behavior of elevation prompt for standard user = DENY
I believe this should solve the problem
Last edited by connect4 : March 27th, 2012 at 06:03 PM.
|