Share via

2.2.11.1 FilterAdministratorToken

  • Article

Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Value: "FilterAdministratorToken"

Type: REG_DWORD

Data: This MUST be a value in the following table.

Value

Meaning

0x00000000

Only the built-in administrator account (RID 500) SHOULD be placed into Full Token mode.<7>

0x00000001

 Only the built-in administrator account (RID 500) is placed into Admin Approval Mode. Approval is required when performing administrative tasks.