I Need To Make A Change With My IT Support! Call (225) 706-8414

Disable UAC via GPO in Windows Server 2008

You need to disable User Access Control (UAC) site wide. The domain controller is running Windows 2008.

Struggling with difficult GPO’s and Active Directory network automation?
learned the hard lessons so you don’t have to!
Contact us to help you get your network running smoothly!


UAC prevents certain administrative tools from being run over a remote control program (like GoToMeeting) because the screen requesting credentials is not visible to the remote user.

1. Login to the domain controller.
2. Open the Group Policy Management Console by typing gpmc.msc into the Search box or clicking Administrative Tools > Group Policy Management. (Ignore the fact that we already   have a GPO for this in the screenshot below, simply run through this checklist to create it.)

 3. Expand Forest > Domain > domainname in the left-hand navigation to get a list of existing GPOs. Right-click on the domain name and select Create a GPO in this domain, and Link it here… Name the GPO “Disable UAC” and click OK.

4. The new GPO will appear in the list. Right click on it and select Edit… Expand Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options

5. Configure the following policies:
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode: Elevate withouth prompting
User Account Control: Detect application installations and prompt for elevation: Disabled
User Account Control: Run all administrators in Admin Approval Mode: Disabled

6. Run gpudate /force on an affected Vista/7 machine and confirm that UAC is disabled.

ATKB# 324

Concerned About Cyber Attacks?


Want to Migrate to the Cloud?

Office 365

Ready to Experience Microsoft Office 365?

Want the latest IT news directly in your inbox? Subscribe now!