Client: Specifies the Protection Mode for User Elevation

Specifies the Protection Mode for a system. UAC credential prompt must be enabled. Configuration values are:

0 = Respect existing Duo authentication control around logon.
1 = Disable Duo at logon and only prompt during UAC User Elevation
2 = Enforce Duo at logon and UAC elevation.

Default: 0

Supported on: At least Windows Server 2003 operating systems or Windows XP Professional

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Duo Security\DuoCredProv
Value NameElevationProtectionMode
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

Specifies the Protection Level for User Elevation:


  1. Respect existing Duo authentication control around logon.
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Duo Security\DuoCredProv
    Value NameElevationProtectionMode
    Value TypeREG_DWORD
    Value0
  2. Disable Duo at logon and only prompt during UAC User Elevation
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Duo Security\DuoCredProv
    Value NameElevationProtectionMode
    Value TypeREG_DWORD
    Value1
  3. Enforce Duo at logon and UAC elevation.
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Duo Security\DuoCredProv
    Value NameElevationProtectionMode
    Value TypeREG_DWORD
    Value2


duowindowslogon.admx

Administrative Templates (Computers)