UAC prompt is blocked when I use Quick Assist

Federico Coppola 1,181

Hi all,
I have the following trouble when I use Quick Assist tool of Windows 10:
all users inside company are "Standard User" and they can not run any software as Administrator.

Sometimes these users ask me remote support, so we use Quick Assist App.

My issue is that very often I need to insert Administrator account to execute operation,
but I can not see screen that permit me to type administrator account and password.

How can I solve it?
I must avoid this problem otherwhise I can not support users remotelly!

It is fine for me that I can see UAC prompt and I can type admin user and password to assist employees.

All PC has got Windows 10 2004 or Windows 10 20H2 inside company.

Thanks so much
Federico

Reza-Ameri 16,981 Reputation points

2021-01-20T16:48:30.583+00:00

Make sure update Windows and Quick Assist app.
Does it ask for password after user entered the code?
This app should be run in standard users too unless you want to perform a task which required administrator access.

Accepted answer

Carl Fan 6,856 Reputation points

2021-01-21T07:24:54.663+00:00

Hi Federico,
As far as I understand it, at the moment if you use Quick Assist , when you connect to a remote users laptop/PC and try to do anything that requires an administrator elevation, the screen is just blanked out.
In the GPO editor, go to Security Settings > Local Policies > Security Options > User Account Control: Switch to the secure desktop when prompting for elevation to Disabled
Hope this helps and please help to accept as Answer if the response is useful.
Best Regards,
Carl
Please sign in to rate this answer.

2 people found this answer helpful.
mmac 51 Reputation points

2023-03-13T15:59:48.14+00:00

There seems to be an issue with the new QA and UAC. It blocks access even with the policy set in MS InTune. Any advice?

Chris J Morley 0 Reputation points

2024-05-10T07:23:36.71+00:00

Is there a way to create an Intune policy to push to all Windows devices managed by Intune, rather than using gpedit.msc on each PC?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

10 additional answers

Federico Coppola 1,181 Reputation points

2021-01-21T05:43:47.977+00:00
Hi @Reza-Ameri ,
Laptop has got lastest Windows 10 updates.

Quick Assist app works fine.

My issue is that:

Remote user is a standard domain user (no administrator privileges)

When UAC message appears I can't see anything about it and I can't type administrator password.

I hope to be clear
Federico
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Federico Coppola 1,181 Reputation points

2021-01-23T07:53:47.297+00:00

Dear @Carl Fan
Thanks!
You are right! I created a domain policy (with your settings) and I applied it to Clients OU.

Is It a vulnerability?

Thanks
Federico
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Pavel yannara Mirochnitchenko 12,606 Reputation points MVP

2021-09-15T06:39:30.717+00:00

Was this solved by GPO? I have the same problem, but I am in Intune.
Please sign in to rate this answer.
Chris J Morley 0 Reputation points

2024-05-10T07:24:40.4666667+00:00

I am also wondering how to tweak this using an Intune policy setting rather than relying on Local Group Policy.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Pavel yannara Mirochnitchenko 12,606 Reputation points MVP

2021-09-15T07:11:52.887+00:00

I enabled this setting in Intune using the Settings Catalog, I ensured the policy has been applied, but still UAC is blacked out...

I also saw then in mmc local sec policies, that the setting is applied...
Please sign in to rate this answer.
Chris X 41 Reputation points

2021-12-20T17:50:39.577+00:00

@Pavel yannara Mirochnitchenko have you had any luck? We're exploring this as well.

Pavel yannara Mirochnitchenko 12,606 Reputation points MVP

2021-12-22T18:33:10.12+00:00

@Chris X yes I managed to do it quite fast, in Settings Catalog you find all "old" UAC settings and you can configure them not to use Secure desktop.

Nate 1 Reputation point

2022-04-18T08:48:14.267+00:00

Hi Yannara
Where does that setting located in Intune. Unable to find it :(
Thanks.

Nate 1 Reputation point

2022-04-18T09:10:02.217+00:00

To my understanding, how do I type admin account and password if UAC prompt was disabled?

Pavel yannara Mirochnitchenko 12,606 Reputation points MVP

2022-04-21T10:35:10.517+00:00

@Nate you should see this in Settings Catalog

Nate 1 Reputation point

2022-04-21T11:44:45.277+00:00

I found it in Intune Devices | Configuration profiles->Create profile. Is there a security risk or any vulnerability after I disable it?

Mikkel Lund Knudsen 111 Reputation points

2022-07-05T08:17:49.917+00:00

We are doing the same right now - seems to be working ok. But its enabled in Security Baseline pr. default - so I dont think its a really good solution to be honest.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

UAC prompt is blocked when I use Quick Assist

10 additional answers

Your answer