none
can UAC be disabled via unattend.xml for server 2008 deployments?

    Question

  • Hello,

    using MDT 2010, deploying server 2008. I've used the EnableLUA (pass 2, offline servicing) setting to configure UAC for server 2008 R2, but when looking for this setting for server 2008, I could not find it? Can this be configured for 2008?

     

    Thursday, October 7, 2010 5:28 PM

Answers

  • Hi,

    Yes in the specialize pass

            <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <RunSynchronous>
                    <RunSynchronousCommand wcm:action="add">
                        <Order>1</Order>
                        <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f</Path>
                        <Description>Disable EnableLUA</Description>
                    </RunSynchronousCommand>
                    <RunSynchronousCommand wcm:action="add">
                        <Order>2</Order>
                        <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f</Path>
                        <Description>ConsentPromptBehaviorAdmin</Description>
                    </RunSynchronousCommand>
                </RunSynchronous>
            </component>


    Blog Microsoft | Déployer Windows 7 | Améliorer les performances de Windows 7
    • Proposed as answer by Yannick Plavonil Thursday, October 7, 2010 5:42 PM
    • Marked as answer by c0pe Thursday, October 7, 2010 7:34 PM
    Thursday, October 7, 2010 5:41 PM

All replies

  • Hi,

    Yes in the specialize pass

            <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <RunSynchronous>
                    <RunSynchronousCommand wcm:action="add">
                        <Order>1</Order>
                        <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f</Path>
                        <Description>Disable EnableLUA</Description>
                    </RunSynchronousCommand>
                    <RunSynchronousCommand wcm:action="add">
                        <Order>2</Order>
                        <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f</Path>
                        <Description>ConsentPromptBehaviorAdmin</Description>
                    </RunSynchronousCommand>
                </RunSynchronous>
            </component>


    Blog Microsoft | Déployer Windows 7 | Améliorer les performances de Windows 7
    • Proposed as answer by Yannick Plavonil Thursday, October 7, 2010 5:42 PM
    • Marked as answer by c0pe Thursday, October 7, 2010 7:34 PM
    Thursday, October 7, 2010 5:41 PM
  • ok, thanks Yannick.

    So there is not a setting specifically for it in the unattend.xml file... but I see based on your example the reg settings required so I can add this to my existing post install scripts.. or to unattend.xml as you have illustrated.

    many thanks.

    Thursday, October 7, 2010 7:34 PM
  • I use a simple batch script to write a registry entry that disables it for all users after the OS is installed, Here's my code:

    ------------------------------------------

     

    @ECHO OFF

    :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

    TITLE Disable User Account Control for Windows 7

    :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

    ECHO Disable User Account Control for Windows 7:

    ECHO.

     

    :: For All Users:

    REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f

     

    ------------------------------------------

    Hope that helps.

     

    Friday, October 8, 2010 3:51 AM