If you don't have Vista or Windows 7 Professional then, as others have noted, you won't have secpol.msc
and so there is no interface for adjusting the relevant settings. However, you can still change them with the trusty old Registry Editor.
The relevant values may be found under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
, and are as follows.
ConsentPromptBehaviourAdmin
: set this to 3
(prompt for credentials) or 1
(prompt for credentials on secure desktop)
ConsentPromptBehaviourUser
: set this to 3
(prompt for credentials) or 1
(prompt for credentials on secure desktop)
PromptOnSecureDesktop
: where the previous two values are set to 3
, this will cause their prompts to appear on the secure desktop; if the previous two values are 1
, then this setting is ignored.
Finally, here is Microsoft's own documentation for these keys: http://technet.microsoft.com/en-us/library/dd835564(v=ws.10).aspx#BKMK_RegistryKeys. IMO their documentation does not make explicit enough the effect of PromptOnSecureDesktop
on the other two options that I list above. The key upsight is that, where the documentation says "prompt for {consent,credentials}" without explicitly saying "on the secure desktop", the value of PromptOnSecureDesktop
determines whether the user is switched to the secure desktop for prompting.