User Account Control: Switch to the secure desktop when prompting for elevation
Applies To: Windows Server 2008 R2
The User Account Control: Switch to the secure desktop when prompting for elevation policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop.
The options are:
Enabled. (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users.
Disabled. All elevation requests go to the interactive user's desktop. Prompt behavior policy settings for administrators and standard users are used.
When this policy setting is enabled, it overrides the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode policy setting. The following table describes the behavior of the elevation prompt for each of the administrator policy settings when the User Account Control: Switch to the secure desktop when prompting for elevation policy setting is enabled or disabled.
| Administrator policy setting | Enabled | Disabled |
|---|---|---|
Prompt for credentials on the secure desktop |
The prompt appears on the secure desktop. |
The prompt appears on the secure desktop. |
Prompt for consent on the secure desktop |
The prompt appears on the secure desktop. |
The prompt appears on the secure desktop. |
Prompt for credentials |
The prompt appears on the secure desktop. |
The prompt appears on the interactive user's desktop. |
Prompt for consent |
The prompt appears on the secure desktop. |
The prompt appears on the interactive user's desktop. |
Prompt for consent for non-Windows binaries |
The prompt appears on the secure desktop. |
The prompt appears on the interactive user's desktop. |
When this policy setting is enabled, it overrides the User Account Control: Behavior of the elevation prompt for standard users policy setting. The following table describes the behavior of the elevation prompt for each of the standard user policy settings when the User Account Control: Switch to the secure desktop when prompting for elevation policy setting is enabled or disabled.
| Standard user policy setting | Enabled | Disabled |
|---|---|---|
Automatically deny elevation requests |
No prompt. The request is automatically denied. |
No prompt. The request is automatically denied. |
Prompt for credentials on the secure desktop |
The prompt appears on the secure desktop. |
The prompt appears on the secure desktop. |
Prompt for credentials |
The prompt appears on the secure desktop. |
The prompt appears on the interactive user's desktop. |