User Account Control: Only Elevate Executables That are Signed and Validated

Configuring Vista User Account Control Settings

This security setting will enforce PKI signature checks on any interactive application that requests elevation of privilege. Enterprise administrators can control the admin application allowed list thru the populationof certificates in the local computer Trusted Publisher Store.

The options are:

• Enabled: Enforces the PKI certificate chain validation of a given executable before it is permitted to run.
• Disabled: Does not enforce PKI certificate chain valdation before a given executable is permitted to run.

Default: Disabled