How To: Disable UAC Through Group Policy

Disable UAC Through Group Policy

  1. This is the method that should be used by administrators wanting to disable UAC across several computers at once.

    This can be done via Local Group Policy or via Active Directory-based GPO, which is much more suited for large networks where one would like to disable UAC for many computers at once.

    If using Local Group Policy you’ll need to open the Group Policy Editor (Start > Run > gpedit.msc).

    If using in AD-based GPO, open Group Policy Management Console (Start > Run > gpmc.msc) from a Windows Vista/7/2008 computer that is a member of the domain. In the GPMC window, browse to the required GPO that is linked to the OU or domain where the computers are located, then edit it, or, if needed, create a new GPO.

    disable-uac-win7-gpo-1

    disable-uac-win7-gpo-2

    disable-uac-win7-gpo-3

    In the Group Policy Editor window, browse to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

     

     

    Make the following changes:

    • User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode – Set its value to Elevate without prompting.
    • User Account Control: Detect application installations and prompt for elevation – Set its value to Disabled.
    • User Account Control: Only elevate UIAccess applications that are installed in secure locations – Set its value toDisabled.
    • User Account Control: Run all administrators in Admin Approval Mode – Set its value to Disabled.

    disable-uac-win7-gpo-4

    Restart the computer when done.

Have more questions? Submit a request

Comments

Powered by Zendesk