sec09

c-sec-09-request-admin-elevated (Enabled)

Ensure the system is set to request administrative credentials before granting an application elevated privileges. Default setting is either "(1):Prompt for credentials on the secure desktop" or "(3):Prompt for credentials" Values and meanings can be seen here - https://msdn.microsoft.com/en-us/library/cc232761.aspx

---

Input Values

• ElevatePromptForAdminCredentials - "0,1,2,3,4,5"

Example

ElevatePromptForAdminCredentials = ('1', '3')

Input Descriptions

• 0 : Elevate without prompting
• 1 : Prompt for credentials on the secure desktop
• 2 : Prompt for consent on the secure desktop
• 3 : Prompt for credentials
• 4 : Prompt for consent
• 5 : Prompt for consent for non-Windows binaries

---

Result And Messages

• PASS
  System is configured correctly

• WARNING

• FAIL
  System is not configured correctly Registry setting not found

• MANUAL

• NA

---

Applies To

• All Servers

---

Required Functions

• None