Menu

📰
0

Helpdesk elevation via remote tool when 'User Account Control Behavior Of The Elevation Prompt For Standard Users' is set to 'Automatically deny elevation requests' ?

Reddit r/sysadmin·u/man__i__love__frogs·about 1 month ago
#InAqBdM1
Reading 0:00
15s threshold

Helpdesk elevation via remote tool when 'User Account Control Behavior Of The Elevation Prompt For Standard Users' is set to 'Automatically deny elevation requests' ? Need a sanity check here, I think LLM is hallucinating. Working on setting up a new environment for a subsidiary. Part of the baselines for controls (CIS or Microsoft Security Baselines) is to have 'User Account Control Behavior Of The Elevation Prompt For Standard Users' set to 'Automatically deny elevation requests'. This means if a user right clicks cmd prompt to run as admin, it's just automatically denied. No way around it. Got me thinking about how helpdesk in a remote support session would install a printer driver, run notepad as an admin or something to edit a config file and type in LAPS credentials. LLMs seem to think that tools like Splashtop, ScreenConnect, Teamviewer, etc... have a way to elevate the session that will work when Automatically Deny Elevation Requests is set. But I'm not finding much info on this.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More