Disabling the UAC - is there a best practice ?

[sys4dmin]

Dear all

 

I found different ways to disable the UAC (manually, by registry, group policy, etc.) - actually I set a group policy with those settings :

 

 

Is that correct or is there a recommendation / best practice to disable the UAC ? Basically I would like to avoid applications like TeamViewer (for remote support) to be blocked, because it's very annoying and time consuming when you can't restart / logoff a session because it has been blocked by UAC.

 

Thanks for your precious help !

[Jorgen Nilsson]

Hi,

Best practice is to have UAC enabled! if you turn of UAC you also turn of Protected mode in Internet Explorer on that machine..

So best practice is without a doubt to have it enabled.

Regards,
Jörgen

[sys4dmin]

Hi Jorgen,

Thanks for your prompt reply. Is there a way then to do a white-list of folders / applications which can run with elevated privileges ? The UAC is very very annoying when you are trying to do remote support and gets always blocked (even with admin credentials) with the dialog box.

Thanks in advance for your reply.