disable UAC via GPO

qwertyiop

How do I disable UAC via GPO on a Win 2003 domain?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Bl8ckr0uter

Ways to Disable or Turn Off User Account (Access) Control (UAC) in Windows Vista Tip and Trick

qwertyiop

Bl8ckr0uter wrote: »

Ways to Disable or Turn Off User Account (Access) Control (UAC) in Windows Vista Tip and Trick

thanks for the help

Devilsbane

Is the group policy going to be available in a 2003 domain? Or would you have to use a logon script or something to modify the regisrty?

Of course, once you have decide that you want this it is easy enough to make the registry edit part of the default image.

tiersten

Why do you want to disable UAC? UAC isn't just that popup. It does quite a few other things behind the scenes and they're actually useful things.

Also, if you toggle UAC on a system that has already been used then you're going to experience some issues with it because the file/registry virtualisation will now be disabled or enabled. You should only ever alter this setting if it is a fresh install of Windows with nothing installed.

Claymoore

tiersten wrote: »

Why do you want to disable UAC? UAC isn't just that popup. It does quite a few other things behind the scenes and they're actually useful things.

Also, if you toggle UAC on a system that has already been used then you're going to experience some issues with it because the file/registry virtualisation will now be disabled or enabled. You should only ever alter this setting if it is a fresh install of Windows with nothing installed.

Tiersten, you beat me to it. You should leave UAC turned on and perhaps just tune the behavior of the prompt a bit. The file and registry virtualization features fix many of the issues that required Admin access in the first place.
User Account Control in Windows 7 Best Practices

If you are having problems with a particular application always requesting admin access, you can use shims from the Application Compatibility Toolkit to fix those messages. Most likely you want the RunAsHighest shim, but other shims would be better depending on the exact nature of the problem.

RunAsHighest

This compatibility fix marks this application to run in the most privileged security context available to the user. This means that it will run with standard user privileges for a standard user or with administrator privileges for an administrator.

If the application is just checking to see if you are an admin, you can lie to it using the ForceAdminAccess shim.

ForceAdminAccess

This compatibility fix addresses issues that may be encountered when an application uses various API calls to verify if the current user is part of the Administrators group.