3.137 - User Account Control - Run all admins in Admin Approval Mode

Information

This check verifies that UAC has not been disabled.

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'User Account Control- Run all administrators in Admin Approval Mode' to 'Enabled'.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip