Enumerate administrator accounts on elevation

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista

This policy setting controls whether administrator accounts are displayed when a user attempts to elevate a running application. By default, administrator accounts are not displayed when the user attempts to elevate a running application. If you enable this policy setting, all local administrator accounts on the PC will be displayed so the user can choose one and enter the correct password. If you disable this policy setting, users will always be required to type a user name and password to elevate.

This policy has no additional user input fields.

• Computer
  Do not display the password reveal button

  At least Windows Server 2012, Windows 8 or Windows RT or at least Internet Explorer 10
• User
  Do not display the password reveal button

  At least Windows Server 2012, Windows 8 or Windows RT or at least Internet Explorer 10
• Computer
  Prevent the use of security questions for local accounts

  At least Windows Server 2016, Windows 10 Version 1903
• Computer
  Require trusted path for credential entry

  At least Windows Vista