How do I configure User Account Control (UAC) so I'm able to use Windows Server 2003 Admin Tools?
Testing has revealed that if you turn UAC off you will be unable to use the Run As command. This means that any action that requires an elevated privileged account will not work in this environment. To enable the Run As command you will need to configure the UAC to the settings listed below.
Please note that this will result in many Windows Security prompts.
For basic users it may be better to turn UAC off. For instructions on how to do this see the ISTS Windows Vista Business with SP1 Installation Guide.
The following table identifies the User Access Control settings.
To get to the UAC policy settings go to start > type secpol.msc in the run command then press enter.
| Policy | Policy | Setting |
| User Access Control | Admin Approval Mode for the Built-In Administrator Account | Enabled |
| User Access Control | Allow UIAccess applications to prompt for elevation without using the secure desktop | Enabled |
| User Access Control | Behaviour of the elevation prompt for Administrators in Admin Approval Mode | Prompt for credentials |
| User Access Control | Behaviour of the elevation prompt for standard users | Prompt for credentials |
| User Access Control | Detect application installations and prompt for elevation | Disabled |
| User Access Control | Only elevate executables that are signed and validated | Disabled |
| User Access Control | Only elevate UIAccess applications that are installed in secure locations | Disabled |
| User Access Control | Run all administrators in Admin Approval Mode | Enabled |
| User Access Control | Switch to secure desktop when prompting for elevation | Enabled |
| User Access Control | Virtualize file and registry write files to per-user location | Enabled |