Windows 10: UAC prompts with QuickAssist, elevated Admin

The quick explanation of how to "unblock" UAC prompts on the remote, from the assisting PC, is, from the assisting PC:1 Open cmd.exe non-elevated on the remote computer.2 Execute runas /user:Administrator cmd3 In the resulting elevated prompt, execute all one linereg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v PromptOnSecureDesktop /t REG_DWORD /d 0x0 /f You can copy these commands to the remote using quick-assist's built-in chat, or an online chat like&nb

:)

 

UAC Elevation prompts?

Which is more secure regards to the UAC Elevation prompt?

And which one should I select for the Admin account?

Prompt for Credentials on the Secure Desktop or Prompt for Credentials?

 

Run .BAT as admin without UAC prompt?

Any elevation from Standard user should produce a UAC prompt - that's a security feature - to run the script as Admin silently from a non-Admin a/c you will have to include the username and password when elevating it.

The work-around is running it from a Scheduled Task with System rights, thereby not hardcoding or exposing the password in the script - the caveat is the task will need to be created/imported under Admin rights.

 

UAC Elevation prompts?

During development testing for Windows 7 MS said they had never seen any malware manage to penetrate the secure desktop.

Additionally, whilst there are several hacking methods that claim to be able to get through to elevated permissions [without any admin prompt being seen] while the user is simply logged in with an admin account they all rely on UAC not being at its maximum setting.
- There was one about three years ago that claimed to be able to do this despite UAC being at full but it seemed to have been circumvented by a subsequent Windows update and its actions could not then be replicated.

Denis