UAC Branding Agent Setting

UAC Branding

Note: Requires ThreatLocker Windows Agent Version 10.1 or greater.

UAC or User Account Control is a part of Windows that defends the Operating System from unauthorized changes. Any time a user who does not have administrator permissions attempts to perform an operation on their machine that requires administrator permissions, a UAC Window will open, requiring the user to input admin credentials or request ThreatLocker Elevation. The UAC Branding Setting type provides several fields that allow you to personalize the UAC prompt that users receive when requesting elevation permissions. The UAC prompt is an essential part of elevation.

To customize this window, navigate to the Agent Settings page.

Select New Setting in the top left corner.

In the Create sidebar, select UAC Branding from the Setting Type dropdown.

A new section titled 'Parameters' will display. There are many different fields that are provided in the 'Parameters' section:

1. Title Label - This field allows you to input a different message that shows at the top of the User Account Control pop-up. The default message will say "User Account Control".
2. Prompt Message Label - This field allows you to change the prompt message of the User Account Control popup. The default message will say, "Do you want to allow this app to make changes to your device?"
3. Publisher Label—This section will change the text for the publisher label, which by default in the UAC message is "Verified Publisher." It cannot change the actual publisher's name.
4. Full path Label - This section will change the text for the 'Full path' portion of the UAC message. The default message for this section is "Full path". This cannot change the name of the actual full path.
5. Windows UAC Option Label - The text for this section refers to the radio button with the text "Windows User Account Control".
6. Username Placeholder - This section allows you to change the text that appears in the 'Username' field when the 'Windows User Account Control' radio button is selected. By default, this field has the text "User Name".
7. Password Placeholder - This section allows you to change the text that appears in the 'Password' field when the 'Windows User Account Control' radio button is selected. By default, this field has the text "Password".
8. ThreatLocker Request Option Label - This field allows you to change the text for the radio button to request elevation. This button usually displays the text "Request ThreatLocker Elevation".
9. User ID/Email Required - This switch is toggled off by default. This setting requires the 'User ID/Email' field to be filled out before requesting ThreatLocker elevation.
10. User ID/Email Placeholder - Changes the text of the User ID/Email entry field. The default text is "User ID/Email".
11. Helper Text - The Helper Text section changes the placeholder shown in the field below 'User ID/Email'. The text usually displays "Information".
12. Additional Information Required - This switch is toggled off by default. Switching this on will require the user to input additional information within the field below 'User ID/Email'.
13. Additional Information Placeholder - The Additional Information section is located below the Request ThreatLocker Elevation section. The text that appears here by default is "To help the cybersecurity professionals process your request, please outline a reason for your request and any information that may help them process the request."
14. Submit Button Label - This label is a button only shown if the 'Request ThreatLocker Elevation' radio button is selected. This button is used to send an elevation request to the Approval Center. This button's default text states "Send Request".
15. Cancel Button Label - This label is a button only shown if the 'Request ThreatLocker Elevation' radio button is selected. This button will cancel the request for elevation and close out the UAC window. This button's default text shows "Cancel".
16. Yes Button Label - This label is a button shown if the 'Windows User Account Control' radio button remains selected. If the user enteers the correct admin user name and password, selecting 'Yes' will grant administrator permissions for the selected application. The button's default text shows "Yes".
17. No Button Label - This button is shown if the 'Windows User Account Control' radio button remains selected. If this button is chosen, the UAC window will close. The button's default text shows "No".

When you enter text into one of the allocated fields, the appearance of the UAC Window changes. This can be customized to fit your organization's needs.

Once you have filled out your Setting Type and Parameters, navigate to the bottom of the 'Create Settings' side panel. Select the 'Create' button at the bottom of the page to create the setting.

Press the Update Agents button at the top of the page to push this new setting to all applicable agents.