How to disable Hide Entry Points for Fast User Switching in the new version of the script.

[ivaluexrays]

The option is now included by default in the Microsoft Security Baselines. However, I was unable to disable this specific option through GPOs and am currently exploring using the registry for this. Could I potentially receive some advice for how to disable this specific feature? Any help would be appreciated!

[HotCakeX]

Hi,
It's not included in Microsoft security baselines, it's always been in the User Account Control category. If it was included in MS security baselines I wouldn't put it on a separate policy in the script like this, to prevent duplication 🙂

To disable it, you need to use group policy again, otherwise after some time or a restart it will revert back, because group policies are made in a way to keep the system compliant with the policies.

To disable that policy you can set it to "Not configured" state like this

The Unprotect-WindowsSecurity cmdlet removes it as well of course, along with pretty much everything else.

[ivaluexrays]

Hi, sorry I might have been looking at the wrong group policy. I was just trying to restore the feature of allowing an admin to enter their PIN/biometrics on the secure desktop for UAC elevation. While I can unblock UAC elevation, I was never able to restore the other feature. I just noticed that it happened after I enabled the Microsoft Security Baselines and am not sure what's causing it now.

[HotCakeX]

I think you're looking for this one

You can change it here

If it's not what you were referring to then the one above it might be

[ivaluexrays]

It does prompt for credentials, but I noticed that before, I had the option of choosing between PIN, biometrics, or Standard Username + Password. I was wondering why that was hidden after running Microsoft Security Baselines