Monday, October 25, 2010

Disabling UAC part 2

I have recently posted about ways of of disabling User Account Control (UAC) in Windows 2008 (See here). What I did not say in that previous post, it is that it is luckily possible to disable UAC just for system administrators. Wonderful, isn't it? Because, frankly, if you are not in a sensitive security environment, or if your systems are well protected from outside access, then this UAC thing can be a real pain for your everyday sysadm activites....

So, here's how to partially disable UAC.
  • Run Registry Editor (RegEdit)
  • Locate the following REG_DWORD value: ConsentPromptBehaviorAdmin
  • Change the value of ConsentPromptBehaviorAdmin from 5 to 0.
  • Now Exit from Registry Editor
  • Restart the computer.
Simple and clean....

Background information: the default value for ConsentPromptBehaviorAdmin is 5, which means that Windows prompts for consent for non-Windows binaries. Other possible values are:

0 = Elevate without prompting
1 = Prompt for credentials on the secure desktop
2 = Prompt for consent on the secure desktop
3 = Prompt for credentials
4 = Prompt for consent

1 comment:

  1. Great post, dude!!! You saved me today! I was going crazy with UAC...


Related Posts Plugin for WordPress, Blogger...