The issue may be that the standard UAC is not being prompted but instead, the UAC prompts with the username already set.
This usually means the user itself or a group the user is associated with is a member of one of the following Windows groups:
-
Backup Operators
-
Cryptographic Operators
-
Network Configuration Operators
-
Power Users
If you remove them from that group and allow AE to manage those elevation request, this ensures that the user has the recommended least privilege without needing any extra permissions.
Comments
0 comments
Article is closed for comments.