Hi there, I have something interesting going on over here on Windows 7 clients. I have been running a 4 digit amount of those in a domain for over a year now. Those clients get a UAC policy which looks like that: Behavior of the elevation prompt for administrators in Admin Approval Mode: Prompt for consent on the secure desktop Behavior of the elevation prompt for standard users: Prompt for credentials on the secure desktop Only elevate executables that are signed and validated: Disabled Run all administrators in Admin Approval Mode: Enabled User Account Control: Switch to the secure desktop when prompting for elevation: Disabled When a standard user tries to run something that requires elevation, the user should get an UAC prompt on the secure desktop. I know the last GPO setting looks a bit suspicious but according to http://technet.microsoft.com/en-us/library/dd834746.aspx if "Prompt for consent" and "Prompt for credentials" is configured, enabled/disabled will make no difference. Now, here comes the funny part: After about a year of living happily with this GPO, *some* of the machines have started to *sometimes* not display the UAC prompt at all. Not like, showing the prompt without the secure desktop. No, nothing at all. Just like if somebody had completely disabled UAC. But... the GPO applies like it should. GPresult shows the settings applied, plus I can see the relevant registry values in the local Registry on the clients. Before I start a case with Premier Services I just wanted to hear if anybody had seen a similar behavior (a fix would be nice, too). Cheers, Martin