Skip to content

Damn Those Problems Posts

PromptOnSecureDesktop breaks after updating to 20H2

I use Quick Assist to remotely manages remote laptop’s. For anyone who does not know this product, it’s a free tool installed on Windows 10 since quite some time. It’s like Remote Assistance, but a lot easier to use. Only thing is, you do need an active 365 license on your Microsoft account.

Also, all my clients are logged in as an User, not as an Admin. As it should be IMO.

However, if you want to do admin-tasks you probably need to run an elevated CMD or Regedit from time to time. This, of course, triggers an UAC prompt. And as with Remote Assistance you, as an admin, are shown the ‘black pause screen’. Well, this is quite inconvenient as your are not physically next to the device… As far as I know there is no way around this.

Wait there is! It’s called either:

  • User Account Control: Switch to the secure desktop when prompting for elevation (GPO)

or

  • Route elevation prompts to user’s interactive desktop (INTUNE, Profile Type: Endpoint Protection)

In the registry the value name is called: PromptOnSecureDesktop.  (it resides in: SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System)

 

HOWEVER

This DOES NOT work anymore on the 20H2 update…

I, unfortunately, have no workaround at this moment of writing. If you do happen to know one, please let me know in the comments!

Also see this Reddit post: https://www.reddit.com/r/sysadmin/comments/m726x8/windows_10_20h2_update_breaks

 

Sources I used:

Leave a Comment

Damn Those Problems : Reborn

Welcome to Damn Those Problems!

The no-nonsense site with fixes for random sysadmin issues.

The first version was on hiatus for quite a while while I was getting a life. But now the site is back with more no-nonsense! Enjoy!

– TB

Leave a Comment