Hi All,
Was wondering it is possible to require a password for any installation on Windows 10.
If possible, can anyone run-down how?
There may be a way in Group Policy Editor, can 'lock down' many things. With my Macintosh MacBook Pro Notebook that is the default, need the password for installing and updating.
You could use UAC for that. If you do not perform other admin tasks daily, it should not be bothersome.
Change User Account Control (UAC) Settings in Windows 10 Windows 10 Security System Tutorials
Hi ran through your link but it never prompts for a password to install a program, just prompts a notification. Set it at the highest security level too.
Run CMD as admin and copy/paste:Code:reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "3" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "3" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableFullTrustStartupTasks" /t REG_DWORD /d "0" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableInstallerDetection" /t REG_DWORD /d "1" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableSecureUIAPaths" /t REG_DWORD /d "1" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUwpStartupTasks" /t REG_DWORD /d "0" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUIADesktopToggle" /t REG_DWORD /d "1" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableVirtualization" /t REG_DWORD /d "0" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d "1" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t REG_DWORD /d "0" /f
ammonation,
If you wanted a password to be enforced you would normally have to change over to a Standard user account.
- It prompts for a password if the user account you are signed into is a Standard user account.
- If you are logged into an Admin account, it just prompts for confirmation with a Yes / No choice instead.
The Registry changes described above might be able to achieve the non-standard behaviour that you want.
Denis
I know this method but it does not require password for all installations, only those that require the administrator privilege:
- Open Local Security Policy (secpol.msc), go to Local Policies -> Security Options -> User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode. Change this setting to "Prompt for credentials on the secure desktop"
You can also use this setting to enable password prompt for modifying important settings or opening administrative tools like Task Scheduler, Registry Editor,... (require that UAC Settings is "Always notify")
Quote
