when we are taking over a sessions through Lync 2010 (shared desktop) and we sometimes recive a UAC promt on the shared desktop, we would like to be able to type in the username and password. But it doesnt work.

Before the session was "paused" (the viewer gets a black screen with a white pause symbol).

But after changing some Group Policyes the "viewer" can see the UAC promt now. But we (the viewer) can't type the username and password.

We had the same problem during Remote Assistance before, but after changing the GPO the problem doesn't exist anymore within a remote assistance session.

Have anyone solved this issue? I think its quite common problem?

Following changes has been made in the GPO:

[Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options]

User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop Enabled

User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Elevate without prompting

User Account Control: Behavior of the elevation prompt for standard users Prompt for credentials

User Account Control: Only elevate UIAccess applications that are installed in secure locations Disabled

User Account Control: Switch to the secure desktop when prompting for elevation Disabled

Thanks for any help.

hello,

it is indeed the secure desktop that causes you to get the pause symbol in lync when sharing a desktop, disabling the secure desktop is the way around that, which it looks like you've done. however, it is a built-in function in lync to not allow for admins through screen sharing to not be able to control during the time of the prompt, even with the secure desktop off, this is a security breach for microsoft applications and they have disabled it. you can have a look at the following links to some other forums so you can get a better understanding here, but this is a common issue that a lot of admins do experience.

http://community.office365.com/en-us/f/166/p/16847/78255.aspx#78255

http://social.technet.microsoft.com/Forums/pl-PL/ocssecurity/thread/ef3b0192-9802-42f7-9105-29c62caa5ffd

best regards

• Proposed as answer by Sharon.ShenMicrosoft contingent staff, Moderator Monday, May 07, 2012 2:28 AM
• Marked as answer by Sharon.ShenMicrosoft contingent staff, Moderator Monday, May 07, 2012 2:29 AM

Yes, this is not supported due to security and i dont Think there is a way around it.

Any updates on this issue? UAC Controll would be very useful to support our employees.