Enforcing UAC

[Dave Harry]

Is there a group policy setting to enforce that local administrators do not
disable UAC?

I have found "Run all administrators in Admin Approval mode". But even if
that's set to enabled, can a local admin still disable UAC?

--
Dave Harry

 

[John]

Take a look in gpedit---Comp Config--Windows Settings--Security
settings--local policies--User rights assignment.
You may need to create a new group to take over the admin rights for
whatever you choose to disable/enable. That way you can go back and change
thinds as they were.

"Dave Harry" <DaveHarry@please.keep.replies.in.the.newsgroup> wrote in
message news:uANr9SJ2HHA.5884@TK2MSFTNGP02.phx.gbl...
> Is there a group policy setting to enforce that local administrators do
> not disable UAC?
>
> I have found "Run all administrators in Admin Approval mode". But even if
> that's set to enabled, can a local admin still disable UAC?
>
> --
> Dave Harry