We don't use UAC and I normally turn off when I build the machines.
but I also have a script that runs New-ItemProperty -Path HKLM:Software\Microsoft\Windows\CurrentVersion\policies\system -Name EnableLUA -PropertyType DWord -Value 0 -Force
We have also had issues with usb devices not being accessible after a shutdown and restart.
The solution to this is to edit/create a reg key
New-ItemProperty -Path HKLM:Software\Policies\Microsoft\FVE\ -Name DisableExternalDMAUnderLock -PropertyType DWord -Value 0 -Force
We have script in intune that runs for machines that are in that system, but it it still reverts back to original settings (value = 1)
Yesterday I got so frustrated that I added the script to a new GPO and applied to our test group (my boss and I).
I booted my machine this morning and I could use my keyboard and mouse. Great a win finally.
I then went to make some change and UAC came up. I checked and indeed it has reverted back to the old UAC level (which for me is FULL Secure)
I then checked the other key and indeed it has now also reset.
I've tried running a Registry watcher to see what is changing setting and I can not find anything amiss, I've checked EV and that also comes out nada.
Where the hell is this being applied.
Anyone have a trick to track these changes?
Thanks
David