User account control pop up on windows 8.1 laptops - GPO setting in Group policy
Hi there,
I am running windows domain with few server 2008 ent and one server 2012 R2 ent.
I have made a new image 8.1 ent.
I have not made my domain users(students) as member of any local groups on the laptops yet. I log in as a student and want to add a printer, the 'user account control setting' asking for domain credentials pops up. I can understand my student group is not part of any local groups yet but for a simple user (a student) the user account control should at least let the student add the printer. Which GPO setting can over come this behavior or do I have to add my student group to local power group to skip this behavior?
-I would like to avoid making my student group as member of local power users, this way they will have more freedom of installing malware/apps
-what is the best way to tackle this issue I simply want my students unable to install malware or any program but can install local/domain printers without any user account pop up. GPO settings where/how
Need help
Thanks
I am running windows domain with few server 2008 ent and one server 2012 R2 ent.
I have made a new image 8.1 ent.
I have not made my domain users(students) as member of any local groups on the laptops yet. I log in as a student and want to add a printer, the 'user account control setting' asking for domain credentials pops up. I can understand my student group is not part of any local groups yet but for a simple user (a student) the user account control should at least let the student add the printer. Which GPO setting can over come this behavior or do I have to add my student group to local power group to skip this behavior?
-I would like to avoid making my student group as member of local power users, this way they will have more freedom of installing malware/apps
-what is the best way to tackle this issue I simply want my students unable to install malware or any program but can install local/domain printers without any user account pop up. GPO settings where/how
Need help
Thanks
ASKER
Mcknife,
I followed for my default policy:
http://blog.pythonaro.com/2013/05/fully-disable-user-access-control-uac.html
and
https://technet.microsoft.com/en-ca/library/cc753269.aspx
The Annoying User account control pops up right in the middle of install of driver. Need help.
I followed for my default policy:
http://blog.pythonaro.com/2013/05/fully-disable-user-access-control-uac.html
and
https://technet.microsoft.com/en-ca/library/cc753269.aspx
The Annoying User account control pops up right in the middle of install of driver. Need help.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Mcknife;
For me here is what worked: 1st
http://prajwaldesai.com/disable-user-account-control-using-group-policy/
2nd
Allow non administrators............
https://social.technet.microsoft.com/Forums/windows/en-US/df21d2c2-c2d4-4107-bfe3-bf8c5a1cd946/install-printer-without-being-administrator?forum=w7itprosecurity
I was following 1st on the OU of the machines. For some reason it did't work, I have to make another GPO right onto the domain(near default GPO), after this I had windows cannot install printer, access denied, which were removed by following step 2.
For me here is what worked: 1st
http://prajwaldesai.com/disable-user-account-control-using-group-policy/
2nd
Allow non administrators............
https://social.technet.microsoft.com/Forums/windows/en-US/df21d2c2-c2d4-4107-bfe3-bf8c5a1cd946/install-printer-without-being-administrator?forum=w7itprosecurity
I was following 1st on the OU of the machines. For some reason it did't work, I have to make another GPO right onto the domain(near default GPO), after this I had windows cannot install printer, access denied, which were removed by following step 2.
ASKER
Hi Mcknife,
Just found out that on our domain clients running 8.1, The store cannot be opened, infact any app clicked says 'will not 'this app cannot open, Turn on UAC'.......I will open a new question
Just found out that on our domain clients running 8.1, The store cannot be opened, infact any app clicked says 'will not 'this app cannot open, Turn on UAC'.......I will open a new question
Windows security sees device installations as a risk. this has always been that way.
"the user account control should at least let the student add the printer" - it would let him install any printer if the driver was already in the system. Power users are no longer usable, they have been deprecated since vista. You would need to deploy the printers using GPOs or loosen something called "point and print restrictrictions" (please google the term, you'll quickly find howtos.