Defines system-wide User Account Control (UAC) settings for privilege elevation and user consent behavior.
Fields
| Field Name | Description |
|---|---|
filterAdministratorToken - Boolean
|
Run the built-in Administrator account in Admin Approval Mode. |
consentPromptBehaviorAdmin - ElevationPromptBehavior
|
Elevation prompt behavior for administrators. |
consentPromptBehaviorUser - ElevationPromptBehavior
|
Elevation prompt behavior for standard users. |
enableInstallerDetection - Boolean
|
Enable detection of installation programs that require elevation. |
enableSecureUIAPaths - Boolean
|
Enable secure paths for UI automation to prevent spoofing. |
enableLUA - Boolean
|
Run all administrators in Admin Approval Mode (UAC). |
promptOnSecureDesktop - Boolean
|
Show elevation prompts on the secure desktop. |
enableVirtualization - Boolean
|
Enable file and registry virtualization for legacy applications. |
Used by
LocalPoliciesWindowstype: Windows-specific local security and system policies.
Example
Example
{
"filterAdministratorToken": false,
"consentPromptBehaviorAdmin": "AUTOMATICALLY_DENY_ELEVATION_REQUESTS",
"consentPromptBehaviorUser": "AUTOMATICALLY_DENY_ELEVATION_REQUESTS",
"enableInstallerDetection": true,
"enableSecureUIAPaths": false,
"enableLUA": false,
"promptOnSecureDesktop": false,
"enableVirtualization": false
}