Restricting Local Administrators from changing UAC settings

Hi,

I am a Junior Administrator at my company. At my company, we have a number of developers that are local administrators on their machines. Our developers have the ability to change the UAC settings on their machines, and that compromises our security. 

I have been researching how to restrict UAC settings via Group Policy, but everything I have read only works on users that do not have local administrator privileges. 

My question is: Is there a way to lock down UAC settings for local administrators? If so, how can I do this?

June 20th, 2015 1:27pm

No - the very fact that they are local administrators mean they can bypass any Group Policy setting you configure.

Free Windows Admin Tool Kit Click here and download it now
June 20th, 2015 1:54pm

So you are saying there is no way to restrict local admins from changing UAC settings at all? 
June 20th, 2015 2:19pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics