When running on Server 2008 R2/Windows 7 as a normal user in a corporate environment you want to remove as much of the User Account Control related stuff as possible. You don’t want your users being prompted for Administrator credntials which they don’t have.
Annoyingly it doesn’t look like this can be done directly via Group Policy, though you can use Prefs.
Remove the “Run as administrator” right-click option:
Value: HideRunAsVerb (REG_DWORD) set to 1
Note that you also set this in HKEY_LOCAL_MACHINE but this will remove the prompt for administrators too, which might not be so handy.
Automatically deny elevation requests (from users):
Value: ConsentPromptBehaviourUser (REG_DWORD) set to 0