Chris Rue's NOLA Mobility Survey and what about UAC?

Tuesday, 20 May 2008 11:15 by Beatrice Mulzer

Ok folks, if you have been to NOLA and went to Chris Rue's mobility session and haven't filled out his mobility survey, please take a minute and go there and tell him what you really thought. Really! He would love to hear from you.

Next item of order speaking about NOLA, there was one particular session where the panel and audience were discussing the "annoying" UAC, and there were suggestions from turning it off to not running Vista. Ouch.

So here is a take from the Windows Server Security Team:

1. Turning off the User Account Control (UAC) is one of the worst thing you can do.

2. If you are going to modify it, modify it at the group policy level.

3. Change the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode and set it to Elevate Without Prompting

4. Do not mess with anything else. This setting will keep Internet Explorer with Protected mode enabled. That would be a smart thing to do. Especially in an SBS environment.