4. Holly, the IT manager, is concerned that staff are attempting to perform configuration changes on their computers for which they have no authorization. While Windows 8 does not allow the users to perform these tasks, Holly wants to ensure users are prompted properly about the actions that they are attempting. Objectives Modify the default UAC prompting behavior.

Modify the default UAC prompting behavior.

You decide to reconfigure the UAC notification behavior, and then reconfigure the UAC prompts.
The main tasks for this exercise are as follows:

1. Modify the UAC prompts.
2. Modify the UAC notification level.
3. Test the UAC settings.

Task 1: Modify the UAC prompts
1. Log on to LON-CL1 as Adatum\administrator with the password Pa$$w0rd.
2. Open the Local Group Policy Editor, and navigate to Computer Configuration > Windows
   Settings > Security Settings > Local Policies.
3. Modify the User Account Control: Behavior of the elevation prompt for standard users value:
   Prompt for credentials on the secure desktop

Task 2: Modify the UAC notification level
1. Enable the User Account Control: Only elevate executables that are signed and validated value.
2. Enable the User Account Control: Behavior of the elevation prompt for administrators in
   Admin Approval Mode value and select the Prompt for consent on the secure desktop option.

Task 3: Test the UAC settings
1. Log on to LON-CL1 as Adatum\Dan with the password Pa$$w0rd.
2. Open Computer Management. You are prompted by UAC for credentials on the secure desktop.
   Provide the necessary credentials, and after Computer Management opens, close Computer
   Management. Log off.
3. Log on to LON-CL1 as Adatum\Administrator with the password Pa$$w0rd, and open Action
   Centre to verify the notification settings for UAC are configured for Always notify.