Endpoint configuration · GraphQL type

UserAccountControlPolicy type

Defines system-wide User Account Control (UAC) settings for privilege elevation and user consent behavior.

Fields

Field Name Description
filterAdministratorToken - Boolean Run the built-in Administrator account in Admin Approval Mode.
consentPromptBehaviorAdmin - ElevationPromptBehavior Elevation prompt behavior for administrators.
consentPromptBehaviorUser - ElevationPromptBehavior Elevation prompt behavior for standard users.
enableInstallerDetection - Boolean Enable detection of installation programs that require elevation.
enableSecureUIAPaths - Boolean Enable secure paths for UI automation to prevent spoofing.
enableLUA - Boolean Run all administrators in Admin Approval Mode (UAC).
promptOnSecureDesktop - Boolean Show elevation prompts on the secure desktop.
enableVirtualization - Boolean Enable file and registry virtualization for legacy applications.

Used by

Example

Example

{
  "filterAdministratorToken": false,
  "consentPromptBehaviorAdmin": "AUTOMATICALLY_DENY_ELEVATION_REQUESTS",
  "consentPromptBehaviorUser": "AUTOMATICALLY_DENY_ELEVATION_REQUESTS",
  "enableInstallerDetection": true,
  "enableSecureUIAPaths": false,
  "enableLUA": false,
  "promptOnSecureDesktop": false,
  "enableVirtualization": false
}