if i start a CMD with elevated rights the UAC asks for the password of my current user, which is only a normal user. So i need to switch the user under "weitere Optionen" (more choices)

enter image description here

If i start a setup i get directly prompted for username and password appears.

enter image description here

Can i configure windows (GPO) to always (eg. start cmd.exe) ask for username and password in UAC dialogs?

1 Answer 1


For this edit the local security policy start secpol.msc. When started go to Local Policies > Security Options and look for "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval mode" The standard setting for administrators is "prompt for consent" but you would want to change it to "Prompt for credentials."

  • The default on my fresh Win10 1803 is "Prompt for consent for non-Windows binaries" an changing to "Prompt for credentials" or "Prompt for credentials on the secure desktop" doesn't change the behavior.
    – Marco
    Oct 9, 2018 at 9:07
  • After changing, did you run gpupdate command? Oct 9, 2018 at 9:41
  • Yes and i restarted the system.
    – Marco
    Oct 10, 2018 at 12:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .