Information Technology

Kevin

<div>
Please advise path of registry addition in GPO. As I would like this change to be done via GPO.
</div>


<div>
The path is included, the key is EnableUAC value 0<br />
<br />
Point is the setting is system based not user based.<br />
<br />
The RDP has two functional modes. When you look at the uac, in which mode is the Server execute, install?
</div>


<div>
alternatively<br />
In the GPMC editor click on Computer Configuration &gt;&nbsp;Policies &gt;&nbsp;Windows Settings &gt;&nbsp;Security Settings &gt;&nbsp;Local Policies &gt;&nbsp;Security Options. On the right pane there are lot of settings that you see, so you need to modify the following policies.<br />
<br />
1) User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode = Right click policy setting, click Properties. Check the box Define this policy setting and choose Elevate without prompting.<br />
<br />
2) User Account Control: Detect application installations and prompt for elevation = Right click policy setting, click Properties. Check the box Define this policy setting and choose Disabled.<br />
<br />
3) User Account Control: Run all administrators in Admin Approval Mode = Right click policy setting, click Properties. Check the box Define this policy setting and choose Disabled.<br />
<br />
<a href="https://prajwaldesai.com/disable-user-account-control-using-group-policy/" rel="ugc">https://prajwaldesai.com/disable-user-account-control-using-group-policy/</a>
</div>


<div>
Also do NOT turn UAC OFF. &nbsp;Bad idea all around and on Workstations, Store and some Windows 10 Apps will not function. <br />
<br />
I can log on to any halfway modern server with UAC ON.
</div>


<div>
The question of the day is, &quot;Why?&quot;
</div>


<div>
@aravind anche - thank you, for your second posting, however as you can see from my initial post (first image), I have these options in GPO set already and it is not working. I will try and add the registry string to the computer account within the registry portion of GPO to see if it has any effect.<br />
<br />
@John &amp;&nbsp;@Philip - I appreciate your concern (and I am grateful for your opinions), but I did not ask for guidance within my initial post. We have no use for UAC to be on this particular server, nor will we be accessing the Microsoft store nor any windows 10 apps. I asked about turning UAC off on just one particular server. I cannot share on this public forum as to why. Thank you however for your response.
</div>


<div>
<div class="content wysiwyg-content">
Good Morning, <br />
<br />
I am attempting to turn off UAC for <b>ALL</b> users who log on via RDP to one of my servers (Windows Server 2012 R2 Std).<br />
<br />
My domain and forest functional levels is Windows Server 2012 R2.<br />
<br />
Below is a screenshot of what I have in GPO.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/10_w43/1396451/gpo1.png" target="_blank" title="gpo (54 KB)"><img alt="gpo" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2018/10_w43/800_1396451/gpo1.png" /></a><br />
I have 2 <b>standard users</b> who connect to this server, and if I log in as them and go to the UAC settings I still see that it is on (screenshot below).<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/10_w43/1396453/uac1.png" target="_blank" title="uac1 (23 KB)"><img alt="uac1" class="file-block lazyload" style="max-width: 760px;" data-src="https://filedb.experts-exchange.com/incoming/2018/10_w43/1396453/uac1.png" /></a><br />
Yet when I login (as a domain admin) to the server via RDP, my UAC setting is off (screenshot below).<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/10_w43/1396455/uac2.png" target="_blank" title="uac2 (21 KB)"><img alt="uac2" class="file-block lazyload" style="max-width: 759px;" data-src="https://filedb.experts-exchange.com/incoming/2018/10_w43/1396455/uac2.png" /></a><br />
Please advise how I can turn UAC off completely for <b>ALL</b> users who log on to this server.<br />
<br />
Kind Regards,<br />
K
</div>
</div>


gpo1.png

uac2.png

uac1.png

Good Morning, 

I am attempting to turn off UAC for ALL users who log on via RDP to one of my servers (Windows Server 2012 R2 Std).

My domain and forest functional levels is Windows Server 2012 R2.

Below is a screenshot of what I have in GPO.


I have 2 standard users who connect to this server, and if I log in as them and go to the UAC settings I still see that it is on (screenshot below).


Yet when I login (as a domain admin) to the server via RDP, my UAC setting is off (screenshot below).


Please advise how I can turn UAC off completely for ALL users who log on to this server.

Kind Regards,
K

How can I Turn off UAC for ALL Users who log on to a paticular server?

Windows Server 2012 is the server version of Windows 8 and the successor to Windows Server 2008 R2. Windows Server 2012 is the first version of Windows Server to have no support for Itanium-based computers since Windows NT 4.0. Windows Server 2012, now in its second release (Windows Server 2012 Release 2) includes Foundation, Essentials, Standard and Datacenter, and does not support IA-32 or IA-64 processors.

Windows Server 2012

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.