User Account Control: Only Elevate UIAccess App Installed in Secure Locations

Configuring Vista User Account Control Settings

This security setting will enforce the requirement that applications that request execution with a UIAccess integrity level (via a marking of UIAccess=true in their application manifest), must reside in a secure location on the file system. Secure locations are limited to the following directories:

• ..\Program Files\ (including subdirectories)
• ..\Windows\system32\
• ..\Program Files (x86)\ (including subdirectories for 64 bit versions of Windows)

Note: Windows enforces a PKI signature check on any interactive application that requests execution with UIAccess integrity level regardless of the state of this security setting.

The options are:

• Enabled: An application will only launch with UIAccess integrity if it resides in a secure location in the file system.
• Disabled: An application will launch with UIAccess integrity even if it does not reside in a secure location in the file system.

Default: Enabled