Managing Windows Vista Security
By —
Questions derived from the 70-622 - PRO: Microsoft Desktop Support – ENTERPRISE Microsoft Self-Test Software Practice Test.
Objective: Managing Windows Vista Security
SubObjective: Configure and troubleshoot User Account Control
Item Number: 70-622.2.8.8
Single Answer, Multiple Choice
You are working as a desktop support technician for your company. You have deployed Windows Vista on all computers. You want administrators to receive a User Account Control dialog box with the Windows needs your permission to continue message before running an administrative task on a computer. Users should not be prompted to enter a password.
What should you do?
- Disable the User Account Control (UAC) feature.
- Configure the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode setting to the Prompt for consent option.
- Configure the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode setting to the Elevate without prompting option.
- Configure the Accounts: Administrator account status setting to the Disabled option.
Answer:
B. Configure the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode setting to the Prompt for consent option.
Tutorial:
You should configure the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode setting to the Prompt for consent option to ensure that administrators receive a User Account Control dialog box with the Windows needs your permission to continue message before running an administrative task on a computer. Using this option, Consent Admin will prompt to select between the Continue and Cancel options before launching an administrative task. A user will be able to access the application only if they select the Continue option. If the user selects the Cancel option, they will be denied access to the application and will not be able to launch the application.
Disabling the User Account Control (UAC) feature will not help you achieve the objective. Disabling this feature will stop prompting users for elevation before launching an administrative application. This will allow administrator and standard users to run administration tools at an elevated level and the Consent Admin will not prompt for permission or credentials. This can either be done by clicking Turn User Account control on or off on the Make Changes to your User Account page in User Accounts in Control Panel or by configuring the User Account Control: Run all administrators in Admin Approval Mode setting to the Disable option.
Configuring the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode setting to the Elevate without prompting option will not help you achieve the objective. Using this option Consent Admin will allow launching the administrative task and setup applications without prompting for consent or credentials.
Configuring the Accounts: Administrator account status setting to the Disabled option will not help you achieve the objective. This security setting determines whether to enable or disable the local administrator account. By default, the administrator account is set to Enabled. Disabling this option when there is no other local administrator account available can become a maintenance issue because any user will not be able to login into the computer using an administrator account.
