Pages

Thursday, 19 April 2012

UAC Administrator Access on a Windows Server 2008 Development Server

Windows Server 2008 R2 has UAC build-in and turned on by default. With a server hosting your applications that is exposed to the outside world, you definitely want to keep this feature turned on!


On an internal development server however, you may wish to disable UAC for the administrator users group as with it turned on you will find barriers when testing that can slow things down - one example is changing a value in an exe.config file in the programs directory as you won't be able to save the config file back to the same location without running the editing program in Administrator mode.


To disable UAC for the administrators group, follow these simple steps:


1. On your server, go to "Administrative Tools" > "Local Security Policy"
2. Expand the "Local Policies" > "Security Options" node and find the "User Account Control: Run all administrators in Admin Approval Mode" policy in the main window.



3. Open the policy and select the "Disabled" option. Click OK and reboot your server.



Again, I would stress that you should never contemplate doing this on a production server, even to allow items to be dropped in the GAC. An installer should always be created for adding DLLs to the GAC on a production server in Windows 2008 R2.


No comments:

Post a Comment