Disable UAC (User Account Control)

Windows Server 2008

Type secpol.msc into Start-Run to open the Local Security Policy snap-in.
Expand the Local Polices?Security Options folder.
Scroll down to
"User Account Control: Behaviour of the elevation prompt for administrator"
Double click and set to: "Elevate without prompting".
Then Restart the computer.
-----------------------------------------
Alternatively this can be set in the registry (then reboot to apply)
Regedit script:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000000
Or with Powershell:
PS HKLM:\> New-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Pol
icies\System" -Name "ConsentPromptBehaviorAdmin" -Value 00000000 -PropertyType "
DWord"
Setting "Elevate without prompting' as above will not completely disable UAC, it
just removes the annoying popup prompts.
To disable UAC entirely, disable the setting:
User Account Control: Run all administrators in Admin Approval Mode
"EnableLUA"=dword:00000000
This is not recommended as it will compromise security.
----------------------------------------
User Account Control: Behavior of the elevation prompt for administrators in Adm
in Approval Mode
This policy setting controls the behavior of the elevation prompt for administra
tors.
The options are:
Elevate without prompting: Allows privileged accounts to perform an operation th
at requires elevation without requiring consent or credentials. Note: Use this o
ption only in the most constrained environments.
----------------------------------------------------------
User Account Control: Behavior of the elevation prompt for standard users
This policy setting controls the behavior of the elevation prompt for standard u
sers.
The options are:
Prompt for credentials: When an operation requires elevation of privilege, the u
ser is prompted to enter an administrative user name and password. If the user e
nters valid credentials, the operation continues with the applicable privilege.
--------------------------------------------------------------------
User Account Control: Use Admin Approval Mode for the built-in Administrator acc
ount
This policy setting controls the behavior of Admin Approval Mode for the built-i
n Administrator account.
The options are:
Enabled: The built-in Administrator account uses Admin Approval Mode. By default
, any operation that requires elevation of privilege will prompt the user to app
rove the operation.
Disabled: (Default) The built-in Administrator account runs all applications wit
h full administrative privilege.
------------------------------------------------------
---------------------------------------------------------
How can user's disable the UAC in Windows 7?
Answer:
From http://www.mydigitallife.info/2008/12/30/how-to-disable-and-turn-off-uac-in
-windows-7/
In fact, the steps to disable UAC is Windows 7 is similar to steps to disable UA
C in Windows Vista, only with slight user interface change, and there is plenty
of methods to turn off UAC too.
Method 1: Disable or Turn Off UAC (User Account Control) in Control Panel
1. To user Control Panel to disable UAC in Windows 7, there are several meth
ods to access the User Account Control settings page:
1. Go to Start Menu -> Control Panel -> User Accounts and Family Saf
ety -> User Account.
2. Go to Start Menu -> Control Panel -> System and Security -> Actio
n Center.
3. Click or right click on Flag icon in notification area (system tr
ay), and then Open Action Center.
4. Type MsConfig in Start Search to start System Configuration, then g
o to Tools tab, select Change UAC Settings, then click on Launch button. 2. Clic
k on User Account Control settings link.
Accessing Windows 7 UAC in Control Panel 3. Slide the slider bar to the
lowest value (towards Never Notify), with description showing Never notify me.
Disable UAC in Windows 7 4. Click OK to make the change effective.
5. Restart the computer to turn off User Access Control.
Method 2: Disable UAC with Registry Editor (RegEdit)
1. Run Registry Editor (RegEdit).
2. Navigate to the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Sy
stem 3. Locate the following REG_DWORD value:
EnableLUA 4. Set the value of EnableLUA to 0.
5. Optional step to suppress UAC consent prompt dialog, locate the following
REG_DWORD value:
ConsentPromptBehaviorAdmin 6. Set the value of ConsentPromptBehaviorAdmi
n to 0 (optional).
7. Exit from Registry Editor and restart the computer to turn off UAC.
Method 3: Turn Off UAC Using Group Policy
For Windows 7 Ultimate, Business or Enterprise edition which has Local Group Pol
icy, or computer joined to domain and has Active Directory-based GPO, the group
policy can be used to disable UAC for local computer or many computer across lar
ge networks at once.
1. Enter GPedit.msc in Start Search to run Local Group Policy editor. (Or gp
mc.msc to run Group Policy Management Console for AD-based domain GPO editor).
2. Navigate to the following tree branch:
Computer Configuration -> Windows Settings -> Security Settings -> Local
Policies -> Security Options
In GPMC, browse to the required GPO which is linked to the domain or OU
where the policy wants to apply.
3. Locate the following policy in the right pane:
User Account Control: Behavior of the elevation prompt for administrator
s in Admin Approval Mode
Set its value to Elevate without prompt.
4. Locate the following policy in the right pane:
User Account Control: Detect application installations and prompt for el
evation
Set its value to Disabled.
5. Locate the following policy in the right pane:
User Account Control: Run all administrators in Admin Approval Mode
Set its value to Disabled.
6. Locate the following policy in the right pane:
User Account Control: Only elevate UIAccess applications that are instal
led in secure locations
Set its value to Disabled.
7. Disable UAC with Group Policy
Restart the computer when done.
Method 4: Using Command Prompt to Disable User Account Control
The command line option can also be used in batch script command file, i.e. .bat
and .cmd files, providing greater convenient to advanced technical user. In act
ual, the commands,, which are also used to disable or enable UAC in Vista, are j
ust doing the same thing as directly modifying the registry.
1. Open an elevated command prompt as administrator.
2. To disable the UAC, run the following commands:
%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MA
CHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t
REG_DWORD /d 0 /f
and optionally, the following comand to suppress all elevation consent r
equest and notification:
%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MA
CHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPrompt
BehaviorAdmin /t REG_DWORD /d 0 /f
Tip: To re-enable UAC, the command is:
%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MA
CHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t
REG_DWORD /d 1 /f
and to turn on prompt for consent UI:
%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MA
CHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPrompt
BehaviorAdmin /t REG_DWORD /d 2 /f