sys4dmin

Dear all I am testing Windows 8/8.1/10 in order to deploy it for my enterprise. However we have some very specific applications which are still developed in an "old fashion" way, and so they doesn't support automatic deployment etc. so we scripted the installation of them with a couple of batch files. However now that I installed this new version of Windows, all of those scripts are broken, even if the account used is an administrator account on the PC and even if the UAC is disabled. I faced that the only way for those scripts to run is to make a right-click and choose "Run as administrator". Do you know if there is a registry key or a group policy I can deploy in order to "always Run as administrator" ? Thanks in advance for your precious help !

Hi Jorgen, Thanks for your prompt reply. Is there a way then to do a white-list of folders / applications which can run with elevated privileges ? The UAC is very very annoying when you are trying to do remote support and gets always blocked (even with admin credentials) with the dialog box. Thanks in advance for your reply.

You probably should uncomment those lines ;OSDComputerName=String ;OSDDomainOU=String

Dear all I found different ways to disable the UAC (manually, by registry, group policy, etc.) - actually I set a group policy with those settings : Is that correct or is there a recommendation / best practice to disable the UAC ? Basically I would like to avoid applications like TeamViewer (for remote support) to be blocked, because it's very annoying and time consuming when you can't restart / logoff a session because it has been blocked by UAC. Thanks for your precious help !

Here is my script to not allow IE10 to install and a line to remove it if already installed REG ADD "HKLM\SOFTWARE\Microsoft\Internet Explorer\Setup\10.0" /v "DoNotAllowIE10" /t REG_DWORD /d 1 /f wusa.exe /uninstall /quiet /norestart /KB:2718695

Thank you all for your replies. Yes I've heard about Avecto, now I requested a demo for Arellia which seems to do quite the same. What is your experience with mobile users ? We have a lot of users working from locations with poor Internet connectivity or staying for a long period offline.

Dear all, I am a system administrator trying to reduce the security risks and viruses/malware on my network . I would like to know how do you manage the administrative privileges on your computers ? Actually we deploy our images with a basic setup/customization/applications and users doesn't have administrator rights on their PCs. However, sometimes there is an application which requires an update and therefore the user needs to have admin rights - at least for this single installation / update. I give you an example : I deploy a computer with GoToMeeting (which is a software from Citrix for attending to meetings) and other apps, until now that's fine - the user can work normally with the apps we decided are authorized for the business. But after a while, GoToMeeting will need a new version or an update when the user try to initialize the meeting. Of course this requires an admin right to install this update - but : a. I don't want to grant admin rights to my users b. is there a way to authorize only some applications to install / update ? Thank you all for your precious help !