up vote 2 down vote favorite
4
share [g+] share [fb]

I want to be able to run as a non-admin domain account for normal work and be prompted for elevation when needed. This is fine when not in a domain as the elevation prompt remembers my user name and I just have to enter my password. In a domain environment, however, the elevation prompt does not remember the domain (the local machine) or the username from the local machine. How can I get the UAC/Elevation prompt to remember this information?

link|improve this question
feedback

2 Answers

up vote 6 down vote accepted

Finally found the answer:

Launch C:\Windows\System32\gpedit.msc using Run As Administrator (from the right click menu) and enable the following setting:

Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Credential User Interface / Enumerate administrator accounts on elevation

link|improve this answer
Nice answer, I like that one, adding it to my list of little things to try out and remember. Must look at whether this is available via domain group policy as well. Only thing I don't like is that it only lists local accounts which are in the admin group, so if I want to use a domain admin account, or some domain\PCTechSupportUser account which I have added to local admins via a restricted groups policy these don't show up. So -1 for using this in corporate environments, but +3 for small installs, home groups etc. – AdamV Nov 5 '09 at 10:17
feedback
up vote 1 down vote

For those using a Home edition of Windows which lacks the policy editor, you can create the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI and add a EnumerateAdministrators of type DWORD set to 1.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.