Hello All,
We have added settings "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" in a GPO and it is applied to all servers.We have set "Prompt for Consent"
In 2008 server in registry "ConsentPromptBehaviorAdmin" set to value 4 and it should be.But there is a difference between 2008 and 2008 R2.In 2008 "Prompt for consent" value should be 2 and then only local policy takes effect or it will show as "Not Defined". I am thinking to create another policy only for 2008 servers and add registry key with value 2.That is the only option I can think of now.Is there any update available to update the GP settings to match with 2008 R2?
In 2008 there are only the below values
0 = Elevate without prompting1 = Prompt for credentials
2 = Prompt for consent
In 2008 R2 Below are the values.
1 = Prompt for credentials on the secure desktop
2 = Prompt for consent on the secure desktop
3 = Prompt for credentials
4 = Prompt for consent
5 (Default) = Prompt for consent for non-Windows binaries