Turn On And Control the UAC

AutoElevate automates a responses to Windows UAC events and therefore requires the Windows UAC setting to be turned on and configured properly. 

Turn ON the Windows UAC

• In the Admin Portal (https://msp.autoelevate.com ) Go to the Computers screen
• Check the box next to the computer(s) you want to adjust the UAC setting for
• From the “Actions” menu select one of the “ON” settings from the ‘UAC Settings’ section (Not-Dimmed, Dimmed, or Maximum)
• Upon next agent check-in the Agent will pick up the new settings. To update your view of the status click on the “refresh” button at the top right hand corner.

Any of the AutoElevate “ON” settings are sufficient for AutoElevate to effectively work however DIMMED is more secure than NOT-DIMMED. For additional details please see: https://support.autoelevate.com/hc/en-us/articles/360000840432-Audit-Guide

* In either case If the UAC setting is changed from OFF-to-ON or ON-to-OFF, the machine will require a reboot for the change to take place. Changing the setting from AutoElevate will not initiate a reboot but AutoElevate will track and report the status in the Admin Portal ‘UAC Status’ field so that you can determine when the setting is in effect.  

Identify systems that have UAC either turned OFF or set too low

In the Admin Portal -> Computers screen look in the data grid at the column entitled: “UAC Status” which displays if the UAC is on or off for the given computer. You can see the status of a given machine by scrolling through the list, can group the computers by their UAC status by dragging the “UAC Status” column to the top area of the grid, or filter the records using the filter at the top of the column.

Additionally, the columns “UAC Admin Level” show what ‘level’ the UAC slider would be set to in the user was logged in as an Admin, whereas the “UAC User Level” shows what ‘level’ the UAC slider would be set to if the user was logged in as a standard user. In either case ‘level 1’ would represent the slider being set all the way to the bottom setting (or ‘off’) and a ‘level 4’ would represent the slider being set all the way to the top setting.

For a more detailed description of the UAC Levels, slider positions, and how they map to AutoElevate pre-defined settings for the UAC or registry entries please see: UAC Levels & Windows User Account Control Settings – AutoElevate Support Center