Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

What's covered

...

Overriding UAC prompts is a three-step process:

  1. There is an out-of-the-box Environment Variable Filter called User Access Control Consent Dialog Detected.
  2. There is an out-of-the-box Environment Variable Action called Suppress User Account Control Consent Dialog, which you'll use to prevent the UAC prompt from appearing.
  3. Create a Blank Application Control Policy.
  4. Test the New Policy

...

  1. In the file library in the left pane, navigate to Policies > Thycotic Solutions > Application Control > Policies. 
  2. Right-click Policies and click New > Blank Application ControlPolicy. 
    Image Removed Image Added
  3. In the Create Item dialog, enter a Name and Description 


     
  4. In the right pane under the Applications to Control, click the Applications link and choose the new Environment Variable Filter. (Optionally you can change this so only certain applications or certain users will see the overridden UAC prompt.)
  5. Under Conditions (optional), click the Exclude any and add the Administrators filter to stop child processes (which inherit elevation) from triggering this policy.
  6. Click the Application Actions tab.
  7. To the right of Applications, select Application action and then click the Select link.
  8. In the Select Items dialog box, select the following:
  9. The Environment Variable Action you created previously.
    1. Add Administrator Rights.
    2. Justify Application Elevation Dialog (this will behave like Self-Elevation).
    3. Justify Application Elevation (kill process) Dialog (will behave like Self-Elevation Without Adding Administrator Rights).
    4. Approval Request Form Action (will behave like Request Elevation).
  10. Click Save

...