none
UAC Disable Automatically after Recommended setting. RRS feed

  • Question

  • Some system with windows 10 in domain environment are automatically getting uac disabled user is unable to open any link given in mail 

    we have tried through registry settings also manual to recomended setting through admin profile.

    Windows is updated properly antivirus is updated properly

    Monday, July 25, 2016 5:27 AM

Answers

  • You can control the UAC settings by using Group Policies.

    Computer Configuration - Windows Settings - Security Settings - Local Policies - Security Options

    • Marked as answer by Saket jha Tuesday, July 26, 2016 3:14 AM
    Monday, July 25, 2016 5:56 AM
  • Hi,

    As T.Kujala mentioned, you can enable this GPO: User Account Control: Run all administrators in Admin Approval Mode in Default Domain Policy on your DC. After applying this GPO, clients’ UAC setting will not be disabled.

    For Registry, the key called EnableLUA should be set as 1.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.

     

    The explanation of User Account Control: Run all administrators in Admin Approval Mode:

    User Account Control: Run all users, including administrators, as standard users.

    This security setting determines the behavior of all UAC policies for the entire system.

    The options are:

    Enabled: Admin Approval Mode and all other UAC policies are dependent on this option being enabled.  Changing this setting requires a system reboot.

    Disabled: Admin Approval Mode user type and all related UAC policies will be disabled.  Note: the Security Center will notify that the overall security of the operating system has been reduced.

    Sincere regards


    Please mark the reply as an answer if you find it is helpful.

    If you have feedback for TechNet Support, contact tnmff@microsoft.com

    • Marked as answer by Saket jha Tuesday, July 26, 2016 3:14 AM
    Tuesday, July 26, 2016 1:48 AM
    Moderator

All replies

  • You can control the UAC settings by using Group Policies.

    Computer Configuration - Windows Settings - Security Settings - Local Policies - Security Options

    • Marked as answer by Saket jha Tuesday, July 26, 2016 3:14 AM
    Monday, July 25, 2016 5:56 AM
  • If user is not a member of administrator in that case will this work.
    Monday, July 25, 2016 6:47 AM
  • Hi,

    As T.Kujala mentioned, you can enable this GPO: User Account Control: Run all administrators in Admin Approval Mode in Default Domain Policy on your DC. After applying this GPO, clients’ UAC setting will not be disabled.

    For Registry, the key called EnableLUA should be set as 1.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.

     

    The explanation of User Account Control: Run all administrators in Admin Approval Mode:

    User Account Control: Run all users, including administrators, as standard users.

    This security setting determines the behavior of all UAC policies for the entire system.

    The options are:

    Enabled: Admin Approval Mode and all other UAC policies are dependent on this option being enabled.  Changing this setting requires a system reboot.

    Disabled: Admin Approval Mode user type and all related UAC policies will be disabled.  Note: the Security Center will notify that the overall security of the operating system has been reduced.

    Sincere regards


    Please mark the reply as an answer if you find it is helpful.

    If you have feedback for TechNet Support, contact tnmff@microsoft.com

    • Marked as answer by Saket jha Tuesday, July 26, 2016 3:14 AM
    Tuesday, July 26, 2016 1:48 AM
    Moderator