Alternatively, You may perform gpupdate /force from an elevated command prompt. To enable Admin Approval Mode, you must also configure the local security policy setting: User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode to Prompt for consent on the secure desktop and then click OK.Īfter enabling Admin Approval Mode, to activate the setting, you must first log in and out. See UAC-Admin-Approval-Mode-for-the-Built-in-Administrator-account If you want to enable the built-in Administrator account to carry out administrative tasks, for security reasons you should also enable Admin Approval Mode. It's recommended not to enable the built-in Administrator account on the client computer, but to use the standard user account and User Account Control (UAC) instead.
If Admin Approval Mode isn't enabled, the built-in Administrator account runs all applications by default with full administrative privileges The built-in administrator account logs on in Admin Approval Mode so that any operation that requires elevation of privilege displays a prompt that provides the administrator the option to permit or deny the elevation of privilege. If a computer is upgraded from a previous version of the Windows operating system, and the administrator account is the only account on the computer, the built-in administrator account remains enabled, and this setting is also enabled.
0 kommentar(er)
