User Account Control: Switch to the secure desktop when prompting for elevation

Applies To: Windows Server 2008 R2

The User Account Control: Switch to the secure desktop when prompting for elevation policy setting controls whether the elevation request prompt is displayed on the interactive user's desktop or the secure desktop.

The options are:

  • Enabled. (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users.

  • Disabled. All elevation requests go to the interactive user's desktop. Prompt behavior policy settings for administrators and standard users are used.

When this policy setting is enabled, it overrides the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode policy setting. The following table describes the behavior of the elevation prompt for each of the administrator policy settings when the User Account Control: Switch to the secure desktop when prompting for elevation policy setting is enabled or disabled.

Administrator policy setting Enabled Disabled

Prompt for credentials on the secure desktop

The prompt appears on the secure desktop.

The prompt appears on the secure desktop.

Prompt for consent on the secure desktop

The prompt appears on the secure desktop.

The prompt appears on the secure desktop.

Prompt for credentials

The prompt appears on the secure desktop.

The prompt appears on the interactive user's desktop.

Prompt for consent

The prompt appears on the secure desktop.

The prompt appears on the interactive user's desktop.

Prompt for consent for non-Windows binaries

The prompt appears on the secure desktop.

The prompt appears on the interactive user's desktop.

When this policy setting is enabled, it overrides the User Account Control: Behavior of the elevation prompt for standard users policy setting. The following table describes the behavior of the elevation prompt for each of the standard user policy settings when the User Account Control: Switch to the secure desktop when prompting for elevation policy setting is enabled or disabled.

Standard user policy setting Enabled Disabled

Automatically deny elevation requests

No prompt. The request is automatically denied.

No prompt. The request is automatically denied.

Prompt for credentials on the secure desktop

The prompt appears on the secure desktop.

The prompt appears on the secure desktop.

Prompt for credentials

The prompt appears on the secure desktop.

The prompt appears on the interactive user's desktop.