List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: RE: [ActiveDir] UAC and Domain Controllers.

Prev Next

You are not authorized to post a reply.

Author

Messages

jeremyts

Posts:44

02/01/2012 7:26 PM
Hi Gabriele, In my experience Ive had to set the following 3 settings to disable UAC via a GPO. User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode: Elevate without prompting User Account Control: Detect application installations and prompt for elevation: Disabled User Account Control: Run all administrators in Admin Approval Mode: Disabled Cheers, Jeremy. From: activedir-owner@xxxxxxxxxxxxxxxx [mailto:activedir-owner@xxxxxxxxxxxxxxxx] On Behalf Of Gabriele Scolaro Sent: Monday, 19 December 2011 8:09 AM To: activedir@xxxxxxxxxxxxxxxx Subject: RE: [ActiveDir] UAC and Domain Controllers. I meant UAC-related GPO settings based on recommended UAC configuration. I understand the recommendation is disabling UAC on Domain Controllers, would User Account Control: Run all administrators in Admin Approval Mode = DISABLED suffice to disable it for all DCs? (GPO linked to Domain Controllers OU)? Thanks Gabriele. From: activedir-owner@xxxxxxxxxxxxxxxx [mailto:activedir-owner@xxxxxxxxxxxxxxxx] On Behalf Of Mark Parris Sent: Monday, December 19, 2011 12:45 AM To: activedir@xxxxxxxxxxxxxxxx Subject: RE: [ActiveDir] UAC and Domain Controllers. Disabling User Account Control (UAC) on Windows Server http://support.microsoft.com/kb/2526083 This may help. As for GPO settings, what do you want to control? Regards Mark Mark Parris \| Active Directory Consultancy MCM: Windows Server 2008: Directory \| MVP \| MCT È+44 7801 690 596 \| ( +44 1372 740373 * mark@xxxxxxxxxxxxxxxx web: http://markparris.co.uk <http://markparris.co.uk/> Twitter: http://twitter.com/markparris Facebook http://facebook.com/markparris <http://facebook.com/markparris> LinkedIn: http://uk.linkedin.com/in/markparris MVP Profile: https://mvp.support.microsoft.com/profile/mark.parris From: activedir-owner@xxxxxxxxxxxxxxxx [mailto:activedir-owner@xxxxxxxxxxxxxxxx] On Behalf Of Gabriele Scolaro Sent: 18 December 2011 23:20 To: activedir@xxxxxxxxxxxxxxxx Subject: [ActiveDir] UAC and Domain Controllers. Working on the plan to upgrade AD to Windows 2008 R2, whats you recommended setting for UAC on Domain Controllers? Any suggested GPO setting(s) for the Domain Controllers OU? Thanks a lot Gabriele. ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > RE: [ActiveDir] UAC and Domain Controllers.

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads