Situation

For various reasons, we use a third-party patch management tool to install patches. (We look forward to the future of peer-to-peer Windows updates).

Recently we enabled UAC to increase security.

But now all users with local administrator rights get a UAC popup when they start their computer.

UAC: Optional Features, Publisher: Microsoft Windows, CLSID: {C6B167EA-DB3E-4659-BADC-D1CCC00EFE9C}

Problem/cause

The cause for this popup seems to be:

We have different language packages installed (English, German, French).

But while in English all options are installed (Display-Language, Text-to-speech, Handwriting, Speech recognition, Typing), in German and French only "Display-Language" and "Handwriting" are installed.

It seems that Windows is trying to change this. And starts a download, causing the uac to pop up.

Since we have (Computer\HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate) disabled, it cannot do its download and terminates.

And will try again in the future => new uac popup => user closes it => repeat.

Question

Is their an option to block/stop this automatic optional language install, so that the popup won't repeatetly show up?

To weaken uac shouldn't be an option.

Installing the language options would neither be the desired solution.

Looking forward to your suggestions & remarks, thank you!

Hi there,

I had same problem (Australian Language pack), so wrote a .ps1 to install these Feature On Demand packs during Intune device setup. You can put it in under Scripts, in the Endpoint Manager (Intune) portal. 

Hope this helps you out:

execution policy

Set-ExecutionPolicy Bypass -Force 

gather all objects with name containing "en-AU" where the install state is NotPresent (as opposed to Installed)

$winFODs = Get-WindowsCapability -Online -Name "*en-AU*" -ErrorAction SilentlyContinue | Where-Object {$_.State -eq "NotPresent"}

Start-Sleep -Seconds 5

Add-WindowsCapability for each one

ForEach ($winFOD in $winFODs) {

    $winFODName = $winFOD.Name

    $outputPSline = "$winFODName is installing now.      "

    $outputPS += $outputPSLine

    Add-WindowsCapability -Online -Name $winFODName -ErrorAction SilentlyContinue | Out-Null

    # the Out-Null ensures each command completes before attempting the next one. And added a small sleep spacer, below also.

    Start-Sleep -Seconds 5

    }

you might want to run the above over again, because I find some FOD's get missed.  (Found that with RSAT FOD's sometimes. Weird issue.)  Start again from here:

$winFODs = Get-WindowsCapabil...

This seemed to fix the UAC hidden prompt CLSID: {C6B167EA-DB3E-4659-BADC-D1CCC00EFE9C}