Friday, April 11, 2008

User Access Control (UAC) Vista - Server 2008

You can change UAC (enable/disable) from 4 different places:
  1. MSCONFIG - TOOLS - Disable/Enable UAC
  2. Regedit - HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System - (DWORD) EnableLUA: 1 - enable, 0 -disable (LUA is acronim for "Least User Access")
  3. GPO - Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options : It is combination "User Account Control" options.
  4. Control Panel - User Account - Turn User Account Control on or off.

It can vary a little bit between Vista and Server 2008, but on the server, which needs to run batch files you will certainly pay attention to those settings, because some batches will not run without privilege level elevation (compatibility mode).

Good link: http://www.petri.co.il/disable_uac_in_windows_vista.htm

1 comment:

  1. Good information to have. Any idea if there is a way to disable the UAC (LUA) in the unattend.xml file for a sysprep'd Server 2008 deployment model?

    ReplyDelete