blue92lx
asked on
UAC not prompting for passwords on Server2008 and Windows 7 network
For some reason I can't get the UAC to prompt for a password during software installs on our network. We have a Server 2008 SBS server and Windows 7 Pro.
All users were previously setup as local admins until they got CryptoLocker today and we're moving them away from this setup. I've removed local admin rights for the users, I've even disabled the local admin all together on the desktop I'm testing with.
I've setup UAC to Level 3 and also Level 4 in GPO and on the slider itself, but it will not prompt for an admin password. This is my current GPO setup:
Used from this link: https://social.technet.microsoft.com/Forums/windows/en-US/3bdd7bb6-82b0-4543-93eb-f68598155729/configuring-uac-via-group-policy?forum=w7itproinstall
Always notify me when:
Programs try to install software or make changes to my computer
I make changes to Windows settings
***
Admin Approval Mode for the Built-in Administrator account = Disabled
Allow UIAccess applications to prompt for elevation without using the secure desktop = Disabled
Behavior of the elevation prompt for administrators in Admin Approval Mode = Prompt for consent on the secure desktop
Behavior of the elevation prompt for standard users = Prompt for credentials
Detect application installations and prompt for elevation = Enabled
Only elevate executables that are signed and validated = Disabled
Only elevate UIAccess applications that are installed in secure locations = Enabled
Run all administrators in Admin Approval Mode = Enabled
Switch to the secure desktop when prompting for elevation = Enabled
Virtualize file and registry write failures to per-user locations = Enabled
I've even disabled the local admin from GPO and confirmed the local admin is disabled on the computer. The user is only a regular user in Active Directory as well.
Any help would be greatly appreciated, Thanks!
All users were previously setup as local admins until they got CryptoLocker today and we're moving them away from this setup. I've removed local admin rights for the users, I've even disabled the local admin all together on the desktop I'm testing with.
I've setup UAC to Level 3 and also Level 4 in GPO and on the slider itself, but it will not prompt for an admin password. This is my current GPO setup:
Used from this link: https://social.technet.microsoft.com/Forums/windows/en-US/3bdd7bb6-82b0-4543-93eb-f68598155729/configuring-uac-via-group-policy?forum=w7itproinstall
Always notify me when:
Programs try to install software or make changes to my computer
I make changes to Windows settings
***
Admin Approval Mode for the Built-in Administrator account = Disabled
Allow UIAccess applications to prompt for elevation without using the secure desktop = Disabled
Behavior of the elevation prompt for administrators in Admin Approval Mode = Prompt for consent on the secure desktop
Behavior of the elevation prompt for standard users = Prompt for credentials
Detect application installations and prompt for elevation = Enabled
Only elevate executables that are signed and validated = Disabled
Only elevate UIAccess applications that are installed in secure locations = Enabled
Run all administrators in Admin Approval Mode = Enabled
Switch to the secure desktop when prompting for elevation = Enabled
Virtualize file and registry write failures to per-user locations = Enabled
I've even disabled the local admin from GPO and confirmed the local admin is disabled on the computer. The user is only a regular user in Active Directory as well.
Any help would be greatly appreciated, Thanks!
ASKER
Actually I created a new user in Active Directory with only basic user rights and tried that, so it wasn't even a user on the desktop. It still didn't work.
Be aware that not all installations will trigger UAC. What happens if you right click setup and select "run as administrator"?
ASKER
I have another client that uses regular, non Active Directory, users and so I tested it on there. I used CCleaner as the installer and it prompts for the admin password during the install, however, on my other client that uses the 2008 server it doesn't. It just prompts the Do you want to continue this install? Yes or No? But doesn't ask for the admin username or password
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Actually this was the issue. However, it wasn't in Active Directoy (I had already checked that side for administrators) it was on the side of the desktop. The administrators group on the desktops includes Domain Users.
So I'll need to remove that. On my test computer I removed domain users from the local administrators group and now UAC is working.
Thanks!
So I'll need to remove that. On my test computer I removed domain users from the local administrators group and now UAC is working.
Thanks!
In Advances System Settings (right-click "Computer" on the Desktop and press "Propeties"). In Advanced System Setting press the tab "Advances" -> choose "User Profiles". Here you can delete User Profiles.