How to configure UAC in domain group policies?

Question

Windows

Good afternoon!
Please tell me how to correctly configure the 10 "User Account Control" rules in Group Policy, so that it would correspond to the slider in the User Account Control "always notify" (the very top)
Thank you!
What is this for?
I want to create a policy that will enable UAC on all workstations in the domain. Now somewhere it is turned off, somewhere it is not and does not ask for an administrator password to elevate privileges.

Answer 1

level 4
Admin Approval Mode for the Built-in Administrator account = Disabled
Allow UIAccess applications to prompt for elevation without using the secure desktop = Disabled
Behavior of the elevation prompt for administrators in Admin Approval Mode = Prompt for consent on the secure desktop
Behavior of the prompt elevation for standard users = Prompt for credentials
Detect application installations and prompt for elevation = Enabled
Only elevate executables that are signed and validated = Disabled
Only elevate UIAccess applications that are installed in secure locations = Enabled
Run all administrators in Admin Approval Mode = Enabled
Switch to the secure desktop when prompting for elevation = Enabled
Virtualize file and registry write failures to per-user locations = Enabled