One of our domain controllers (Windows Server 2008 R2) stores the backup files for the network. I want to give a domain user the right to log in to the DC and run optical disc burning software (e.g. CyberLink Power2Go). I have been able to grant login access (default DC GPO -> Allow log on locally). The user is able log in and launch the burning software, but the software does not see any disc burners. When I log in as myself (I have full domain admin rights) and run the software normally, I also do not see the disc burners, but if I run the software as administrator, the software runs correctly and can burn discs. Until recently, the machine where we burned the backup discs was a Windows Server 2003 domain controller and the user could log in and run the software successfully. But we recently replaced that machine with the WS 2008 R2. The new machine is still a DC of the same domain, so it should be using the same GPO. Can anyone help me understand what I must do to let a domain user run software as administrator without giving him full domain admin rights?

Hi, Before we go further, I would like to confirm if the administrator that you can use to run the software and burn discs is the built-in administrator. This problem may be caused by User Account Control. I suggest you temporarily disable UAC on Windows Server 2008 R2 for a test. Please make sure to enable it after the test. Regards, Bruce

Hi, Before we go further, I would like to confirm if the administrator that you can use to run the software and burn discs is the built-in administrator. This problem may be caused by User Account Control. I suggest you temporarily disable UAC on Windows Server 2008 R2 for a test. Please make sure to enable it after the test. Regards, Bruce

temporarily disable UAC on Windows Server 2008 R2 Bruce, I wanted to try disabling UAC but I can't find the place to do it. Some help resources tell me to do it in Control Panel\User Accounts\User Accounts. But under "Make changes to your user account", "Turn User Account Control on or off" is not there. Other places tell me to use MSCONFIG and go to the Tools tab and find "Disable UAP". But that is not there for me either. I'm willing to try disabling UAC but what am I doing wrong. I tried on this DC and also on a WS2008 R2 member server. Cam

Just a few threads below you have the answer : http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/f093f8a8-16fd-40d9-a120-0d12408c52f2

Just a few threads below you have the answer : http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/f093f8a8-16fd-40d9-a120-0d12408c52f2

I would like to confirm if the administrator that you can use to run the software and burn discs is the built-in administrator. No, it is a domain administrator (i.e. member of Domain Admins and Enterprise Admins). This problem may be caused by User Account Control. I suggest you temporarily disable UAC on Windows Server 2008 R2 for a test. Unfortunately no. The user no longer gets security messages when launching, but the software still does not see the disc burners.

The last part refers to your problem: http://windows.microsoft.com/en-US/windows-vista/Disc-burning-frequently-asked-questions

The last part refers to your problem: http://windows.microsoft.com/en-US/windows-vista/Disc-burning-frequently-asked-questions Do you mean the one about using Remote Desktop Connection? No, we are not using RDC. We are logging in locally at the console.