UAC , Software deployment and stuff
Hi, apologies if this is in the wrong forum, wasnt sure where to put it ... The problem I have is with UAC. We had standard users and would like to turn off UAC completely. If we keep it on then it means we will have to create 'UAC fixes' probably with the Application Compatability Toolkit for any app that is not properly Windows 7 compatible. Also, with UAC disabled you cannot run control panel cpls using a local or domain admin account which means in order to e.g remove an application using Add/Remove programs you need to log off as a standard user and log on as an admin. Any ideas would be appreciated. Thanks
March 30th, 2011 3:06am

Hello - May be, you can try http://social.technet.microsoft.com/Forums/en-US/category/w7itproAnoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
March 30th, 2011 3:09am

Yes and no. WIn 7 Compatibility is about much more than applications requiring some elevated privilieges. UAC strictly deals with removing any elevated privileges from the user's token at log on time while mainting the ability to reinject these privileges on demand with user consent. In most cases, applications that don't run as standard users simply need a registry key or directory opened up for normal user access. This is easily discoverable using a tool like procmon. The real question comes down to why are you disabling UAC? I'm not saying you shouldn't, but it's a decision not to make lightly. I do find your statements above a little contradictory though. On one hand you are saying you want your users to be standard (non admin) users but then you are saying that you want them to do privileged tasks like uninstall software. That doesn't compute. Is it a help desk issue? If so, then there's no need to log off, just use fast user switching.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
March 30th, 2011 9:39am

thanks for that Jason, yes it is a help desk issue, will investigate fast user switching thanks.
Free Windows Admin Tool Kit Click here and download it now
March 31st, 2011 9:46am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics