Turning UAC off.

[Rob_D]

Hi guys,

 

This is probably a really silly question, but...

What would be the ramifications of turning UAC off on locked down domain computers?

We've got all the standard polices, no right click, no running .exe files, no control panel or command prompt access.

I don't see why turning UAC off is that be a deal, it's not like they can get to anything that would require UAC anyway. So what am I not thinking of?

 

As always, thanks for your help.

 

Rob.

[ricki]

Is you are running Windows 10 edge plays up but most things work ok

[FN-GM]

You should thinking the other way really. Why would you want to turn it off?

[ricki]

It lets you run scripts

[Blue_Cookeh]

Modern apps wont work with UAC disabled, for example (in Win10). Microsoft are going to make your life more and more difficult if you decide to turn it off. It's an extra layer of kernel level security in Windows. We force it ON via GPO in our environment and have actively refused to purchase software that require it be disabled.

 

 

I'd argue the people turning it off nowadays don't really know what they're doing when it comes to a Windows deployment, harsh but meh.

Edited May 12, 2017 by Blue_Cookeh

[Rob_D]

At the moment we're looking at turning it off as it's the only way Smart Notebook/Ink works properly. It would only be a temporary fix (I hope), and after reading Blue_Cookeh's link, I'm even less keen.

[sted]

At the moment we're looking at turning it off as it's the only way Smart Notebook/Ink works properly. It would only be a temporary fix (I hope), and after reading Blue_Cookeh's link, I'm even less keen.

 

what version ive never had any particular issues (bar the smart plugin for word with it and i generally dont turn uac off now sims isnt quite as bad (solus3)

[Rob_D]

what version ive never had any particular issues (bar the smart plugin for word with it and i generally dont turn uac off now sims isnt quite as bad (solus3)

We're using 16.2, but also get the problem on 17(with UAC on). I've still got a call open with Smart, so hopefully they'll come up with something else.

[Duke5A]

UAC can be a royal PITA with specific software and deployment methods. I have a Win10 and Win7 base images and UAC is left on in 10, but disabled 7. It's been disabled in 7 since we switched over about six years ago. On a locked down machine there is no need for it, but like already noted you should leave it on if running 10.