UAC asks for a password where it's not needed. Where to dig?

Question

Windows

where else besides the uac slider in the control panel is its behavior set?

we have a clean win10pro

without a domain,

a local user is not an admin (only a group of users)

I can run both the task manager (taskmgr) and mmc (with user snap-ins)

i.e. uac with default values ​​does not ask for any passwords. It also doesn't give warnings. (it is always possible to request elevation and then enter admin passwords)

problems arise when you enter into the domain.

the same conditions: domain user is not an admin, membership is only in domainuser

when you start mmc or taskmgr and a bunch of other programs, uac prompts you to enter the password of this user himself, well, or select "another user" and you can enter the admin one. (depending on the entered - the corresponding rights for the program)

i.e. complete mess

QUESTION: what and where to change in gpedit.msc\secpol.msc to take precedence over the domain setting in this regard?

the problem is that studying gpresult / h does not help to understand what exactly is messed up in gpo and why uac behaves this way.

ps I can't steer the gpo myself

Answer 1

Hello, is there a solution? And then the same garbage on the terminal. And as far as I understood from Google, the problem can be not only in politicians, but also in the groups in which the problem user is a member.

Answer 2

not found.
this is not set by politicians (gpresult there is nothing suspicious), but what if not them, then hz.