How to turn off UAC

[Migration User]

How to turn off UAC by GPO. I use Windows Server 2003 R2 SP2 domain controller. I have no Windows Server 2008 domain controller.
Thanks

[Migration User]

I think it is better to create a script for doing this and you can apply it via log on script.
Run the following command to disable and turn off UAC:

C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

[Migration User]

1.Click Start and click Run.
2.Type gpedit.msc and click OK. This will open the Group Policy Editor.
3.Browse to Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Options.
4.In the details pane, locate the User Access Control policies.

1.Right click each of the following policies and change the value as indicated below:
2.User Account Control: Detect application installations and prompt for elevation – Disabled
 

•User Account Control: Behavior of the elevation prompt for standard users – No prompt
•User Account Control: Run all administrators in Admin Approval Mode – Disabled
 

[Mick2009]

Hi Thaolv,

It seems that you have already made your decision to disable UAC, but you may wish to reconsider before rolling that out to everybody via GPO.  It can be a powerful security tool.

There are a lot of articles debating its merits- have a read of a couple....

http://www.windowsecurity.com/articles/Exposing-Microsoft-Windows-7-User-Account-Control-UAC.html
http://technet.microsoft.com/en-us/library/dd560691.aspx
http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx

Security decisions are of course up to individual admins, but do be engaged and informed.  I personally recommend leaving it enabled by default.

Thanks and best regards,

Mick

[Migration User]

UAC is an annoying feature that users don't even understand or pay attention to , if they want to install some software that also installs other bogus software addons then they'll click allow anyway, no matter what. They don't want to read that stupid little prompt =P

You're much better off disabling this feature & also creating GPO's to limit just exactly what users can / can't do on their machine. Everything can be done via GPO just as securely & you won't have that User Access Control getting on everyone's nerves