How to disable UAC via group policy?

[mjt41]

Hi guys and girls

 

I'm having a bit of a problem with my domain, recently upgraded to a Server 2008 on our domain controller and we have 40 win7 laptops, every time the students try to play a flash game UAC pops up and asks for a password to install flash even though it's already installed.

 

Is there a way of disabling UAC? or is there another way around this because it's starting to get on my nerves

 

Cheers

 

Matt

[ricki]

Hi

 

Is this what you are after http://i.techrepublic.com.com/blogs/windowsserver_uactip_figb.jpg?tag=content;siu-container

 

Richard

[mjt41]

Hi Richard,

 

I've just been through that site and changed all the settings to the same but still getting the problem

 

Matt

[cromertech]

Are you sure it's asking for an install or just permission to run? You can add flash to the list of permitted IE add-ons to remove the permission to run. I seem to remember getting something similar but run everybody on chrome now as the admx templates allow you to control it like IE.

[ChrisMiles]

The group policy option is:

 

Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > User Account Control: Behavior of elevation prompt for administrators in Admin Approval Mode

 

set this setting to "Elevate without prompting" to disable UAC.

[simpsonj]

I've got the following:

 

UAC: Behavior of the elevation prompt for administrators in Admin Approval Mode - Elevate without prompting

UAC: Behavior of the elevation prompt for standard users - Automatically deny elevation requests

UAC: Detect application installations and prompt for elevation - Disabled

UAC: Only elevate executables that are signed and validated - Disabled

UAC: Only elevate UIAccess applications that are installed in secure locations - Disabled

UAC: User Account Control: Run all administrators in Admin Approval Mode - Disabled

UAC: Switch to the secure desktop when prompting for elevation - Disabled

 

Almost certainly some unneccessary options set there, but the students definately don't have UAC inflicted upon them, which was causing an issue for me with Quicktime and logging in.

[mjt41]

Cromertech - It could be for the running of the program as well but when I've put the admin password in it starts up the installer, will install then it'll run the game

 

ChrisMiles - I've changed the settings to what you've put but there is no change, the UAC still pops up

[ChrisMiles]

Cromertech - It could be for the running of the program as well but when I've put the admin password in it starts up the installer, will install then it'll run the game

 

ChrisMiles - I've changed the settings to what you've put but there is no change, the UAC still pops up

 

I assume you've restarted after applying this setting?

[mjt41]

yep, restarted laptops, tried different laptops but still occuring.

 

I've just changed the settings to the same as what simpsonj put, i'm now not getting the UAC pop up, just the install bar at the bottom but when you press install it does nothing :/

[ChrisMiles]

Try uninstalling flash and reinstalling it? I've never encountered this problem. Sounds like IE doesnt think flash is actulaly installed. Do you roll out flash using msi install through group policy?

[cromertech]

Just out of curiosity what version of flash is it? It may need to be installed to all users

I've just tested on one of ours with a student account and flash content will run in IE without elevation.

I have got flash installed on my reference image but I can't remember whether this was what solved it or allowing some security settings in group policy

[mjt41]

I've re installed a couple of laptops, tried them and they worked, then let the students log in and nothing, same problem.

 

Flash is just installed manually by me on all laptops

[mjt41]

it this version - Flash Player 11.1.102.62 (IE)

 

I'm going try rolling back to 10.3 and see if the problem still occurs

[sted]

it this version - Flash Player 11.1.102.62 (IE)

 

I'm going try rolling back to 10.3 and see if the problem still occurs

 

id guess it will occour more. My guess is that the website with the game on wants a newer version of flash installed than the pcs have and is trying to force an update. Simple test try going to http:\\Adobe - Flash Player see if the behavior persists (or try manually turning off uac on one of the pcs see what happens)

[mjt41]

Tried an earlier version but getting the same results, unfortunately I haven't got a laptop to test with today as they are all being used

[Arthur]

Have you tried running the Flash Player Uninstaller and then installing Flash Player again?

 

I had the same problem you described on my home computer and I think this is what I did to fix it.

[mjt41]

Managed to sort this now, feel quite stupid now, reason for it always asking to install is because i accidently installed the 32 bit version of flash instead of the 64 bit version, it now works fine for the student accounts.

 

Thanks for the help though