none
Server 2008 Disable UAC (Whats the dealio?) RRS feed

  • Question

  • Greetings.

    We have a domain with +2500 users, we have some different programs that runs via a GPO on user logon, but since the UAC is enabled for users they get prompted with a popup box (Do you want to run this program bla bla bla, Press "OK"). Now we where thinking if we disabled the UAC would this eliminate the popup boxes? But! we still dont wont the users to be able to install programs, we want only administrators to be able to do this.

    There is 3 settings for the UAC in the GPO, which one should be enabled to eliminate the issue above?

    Thanks!

    Monday, January 3, 2011 8:11 AM

Answers

  • I would disable UAC or configure it's behavior in domain policies (Computer Configuration -> ... -> Security Options, the last ones)

    To prevent users installing programs, never assign them membership in Administrators and PowerUsers groups. To prevent users from launching unwanted software (including viruses on flash-drives) configure Software Restriction Policies.


    MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor
    Monday, January 3, 2011 1:37 PM

All replies

  • Hello,

    see this article about, covers all options:

    http://www.petri.co.il/disable-uac-in-windows-7.htm


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Monday, January 3, 2011 11:12 AM
  • I would disable UAC or configure it's behavior in domain policies (Computer Configuration -> ... -> Security Options, the last ones)

    To prevent users installing programs, never assign them membership in Administrators and PowerUsers groups. To prevent users from launching unwanted software (including viruses on flash-drives) configure Software Restriction Policies.


    MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor
    Monday, January 3, 2011 1:37 PM
  • UAC pop up box occurs because the action user want to do required Administrator permission. Thus if user do not have administrator permission, the action will not be applied either enable or disable UAC. The different is get the pop up box, or get an "administrator permission needed/access dnied" error directly.
    Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com
    Tuesday, January 4, 2011 1:09 AM
    Moderator