Question : Configure UAC to allow background admin function on domain computers??

Does anyone know how to configure windows UAC for computers on a domain so that they allow admin functions such as logon scripts mapping printers and installing software remotely to function, scheduled tasks, etc to run without completely turning of UAC or having a user present to constantly click the continue button to allow the process to run?

Answer : Configure UAC to allow background admin function on domain computers??

Yes, local admin should be just fine.  As long as each machine is set to have their domain account as part of the "administrators" group on their machine, this should work without any problems.

The script should change the GP (since they are admins on their machine they should be able to change the GP) though, you might need to temporarily "unlock" gpedit so that the settings will stick.  From what i recall, if a setting is "enforced" by AD, it will not be changeable.  They will get the UAC prompt to allow the initial change, at which point it will set (admin approval behavior to "no prompt"), from there you'd save the local GP, and go about your merry way making the desired changes/additions.  Then at the end you can either set the GP back to what it was, or run gpupdate.exe /force to sync their machine with AD (gpupdate usually requires a reboot before settings take effect) but since this setting is dynamic, it would probably take effect immediately.

That's how i would try to do it.
Random Solutions  
 
programming4us programming4us