I am running Win 8.1 in an enterprise environment. The installation I am referring to in this question is a fresh install with no viruses or malware. On public computers, the PCs login automatically using a domain account that is tightly locked down with a GPO (it cannot access the UAC). The computers regularly require the use of apps from the start screen. Randomly, but often (multiple time per day on each machine), with no apparent cause, the UAC turns off and the apps will not open. To solve this, our tech support has to log with an administrator user that is not affected by the GPO, reenable the UAC, and reboot. 

I need to know how I can set the UAC so that it cannot be turned off. Any suggestions would be greatly appreciated.

Hi Kelli,

Open run -> Type Gpedit.msc which will open Local group policy editor. Navigate to # Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options in security option policies check for User Account Control settings. In case you have Group policies Applied for it tally the same with Local policies.

Regards

Shashank

Hi,

Do you have local user account on the mahcine? Does the issue happen on the local account? First, I would suggest you check whether this issue is caused by the applied GPO, you can run command rsop in the domain account and check what policies have been applied.

As Shashank mentioned, UAC can be controlled Security Options, you can check these settings or you can force the UAC settings via a GPO

More information about group policy UAC can be found in

https://technet.microsoft.com/en-us/library/dd835564(v=ws.10).aspx

And the following link lists UAC level and its corresponded group policy settings.

http://blog.bruteforcetech.com/archives/637

NOTE This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.