Title

User Account Control is configured for the appropriate elevation prompt for standard users. (Cat II impact)

Discussion

This check verifies that the logged on user is prompted for administrative credentials on the secure desktop when he attempts to complete a task that requires raised privileges.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “User Account Control: Behavior of the elevation prompt for standard users” to “Prompt for credentials on the secure desktop”.

Additional Identifiers

Rule ID: SV-25118r1_rule

Vulnerability ID: V-14236

Group Title: UAC - User Elevation Prompt

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.