Vista - Enabling UAC with Credentials for Local Admins when managing Server 2008

The Remote Server Administration Tools for Windows Vista SP1 is available:

• Microsoft Remote Server Administration Tools for Windows Vista for x64-based Systems (KB941314)
• Microsoft Remote Server Administration Tools for Windows Vista (KB941314)

Validation is required for both downloads. Once they are downloaded, both should be placed on the Technician's Thumb Drive for later installation.

When running the admin tools, we need to be prompted by UAC for credentials so that we can authenticate in the management console as domain admin.

If, however, we are working on a Windows Vista workstation where the user account has local admin priviledges, then the UAC will only prompt to continue on into the admin consoles.

This will not work for managing servers as that elevation is local admin only.

We need UAC to prompt for credentials every time. To do this we do the following:

1. Start
2. GPEdit.msc [Enter]
3. Navigate to: Local Computer Policy --> Computer Configuration --> Windows Settings --> Security Settings --> Local Policies --> Security Options:


• 

  UAC Prompt: Behaviour for admins

4. Change the default from "Prompt for Consent" to "Prompt for credentials"


• 

  UAC Behaviour Options

5. Click Apply and OK
6. Close the Local Group Policy Editor

One should now be prompted for credentials every time a UAC is presented.

This setting is machine specific, so any users of the machine will need to enter their domain credentials if they are presented with a UAC prompt. Keep this in mind for systems that are used when at the client site for server management.

Thanks to Josh's Windows Blog for providing us with the tip: Windows Vista Tip: Run as administrator.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists

*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.