UAC and Run As Administrator adjustments for Users

When running on Server 2008 R2/Windows 7 as a normal user in a corporate environment you want to remove as much of the User Account Control related stuff as possible. You don’t want your users being prompted for Administrator credntials which they don’t have.

Annoyingly it doesn’t look like this can be done directly via Group Policy, though you can use Prefs.

Registry entries:

Remove the “Run as administrator” right-click option:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value: HideRunAsVerb (REG_DWORD) set to 1
Note that you also set this in HKEY_LOCAL_MACHINE but this will remove the prompt for administrators too, which might not be so handy.

Automatically deny elevation requests (from users):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Value: ConsentPromptBehaviourUser (REG_DWORD) set to 0

This entry was posted in Windows and tagged , , , , , , . Bookmark the permalink.

3 Responses to UAC and Run As Administrator adjustments for Users

  1. Nick Fendall says:

    its not working for me, the option is still there!

  2. Nick Fendall says:

    All working now!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s