none
UAC settings not applied for standard user

    Question

  • Hi- Windows 2012 R2 Server w/ 8.1 Enterprise workstations

    I have created a GPO to manage UAC settings. However, the settings are only applied if the user logging in has Admin rights. I've tested this several times:

    1) Adjust UAC settings in the GPO

    2) Run gpupdate /force on workstation

    3) Log in with account that has Admin rights

    result: UAC settings are applied

    1) Log in as standard domain user

    result: settings are not applied


    "Never, ever doubt what nobody is sure about." -Willy Wonka


    • Edited by SteveSmo Monday, December 15, 2014 7:55 PM
    Monday, December 15, 2014 7:55 PM

All replies

  • More info:

    I changed the settings to 'Level 1' in GPO, applied, then when logged in as standard user, could not access "Change User Account Control settings" panel.

    Changed the settings back to 'Level 2' in GPO, logged in as standard user, could access "Change UAC settings" panel (prompted for Admin credentials, as expected) but settings still don't reflect those set in GPO (i.e. settings still show 'Level 3').


    "Never, ever doubt what nobody is sure about." -Willy Wonka



    • Edited by SteveSmo Monday, December 15, 2014 9:16 PM
    Monday, December 15, 2014 9:15 PM
  • Hi,

    >>1) Log in as standard domain user

    >>result: settings are not applied

    After the standard user logs onto the computer, please run cmd command gpupdate/force again to see if it helps. Besides, to double confirm if the UAC settings are applied, we can run command gpreuslt/h gpreport.html with admin privileges to collect group policy result report to check this.

    In addition, regarding UAC settings, the replies provided by Ronnie Vernon in the following thread can be referred to as reference.

    Configuring UAC via Group Policy

    https://social.technet.microsoft.com/Forums/windows/en-US/3bdd7bb6-82b0-4543-93eb-f68598155729/configuring-uac-via-group-policy?forum=w7itproinstall

    Best regards,

    Frank Shen



    Tuesday, December 16, 2014 9:20 AM
    Moderator
  • I ran gpupdate /force and then checked what GPOs are being applied with gpresult. It does show that the UAC GPO I created is being applied, but when I check the settings for the standard user, the slider bar for UAC just doesn't move. It's stuck at Level 3...

    Never, ever doubt what nobody is sure about. -Willy Wonka


    • Edited by SteveSmo Tuesday, December 16, 2014 5:40 PM
    Tuesday, December 16, 2014 5:40 PM