UAC and Teamviewer

[YOCS]

I'm sure others have seen this. It doesn't happen that often but every once in a while I'll have a customer that has turned UAC all the way up. When I try to run any programs the remote session hangs for about 1-2 min with a security prompt on their end asking if they want to allow the program. I can get around it by calling the customer and have them move the slider down to turn it off. I realize this is a security feature but I was just curious if anyone else has a way of turning off UAC remotely?

 

[LedHed]

I was having similar issues with another remote program. I didn't want to turn off UAC completely because I was afraid I would forget to turn it back on. The solution I found is from a freeware program called Elevated Shortcut (http://winaero.com/comment.php?comment.news.152).

The software creates shortcuts which bypass the UAC on the programs you specify. The downside is that you have to create each shortcut individually. This can be done remotely but it is faster and easier to have physical access to the machine for the initial setup.


Hope this helps.

Andy

 

[gunslinger]

I always disable UAC before starting work on any system. Learned this lesson the hard way a long time ago.

 

[YOCS]

I'll have to check out that Winaero site. I have D7 configured to auto turn on UAC at start up and turn off on close. The issue is with the initial remote connection. When I fire up D7 I get the UAC prompt and the session locks up for about a min before it times out and I regain control. Usually D7 will not have an issue turning it off but this customer moved the UAC slider all the way up.

 

[MattyUSA]

I've been using TechInLine because of the same issues. Not have a UAC prompt in remote support since.

I did start to look at how to create shortcuts to tackle this. I found registry settings and a process relaunch approach.

I suspected that the remote support tools that don't suffer with UAC prompts might simply perhaps be setting the registry first and disabling on again on disconnect.

Registry/commandline
UAC Off

REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f

UAC On

REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f

However I'm not sure if this approach would take immediate effect. I imagine perhaps the hive would have to be reloaded. perhaps gpupdate would be the answer here.

Whilst not ideal at all, it's also possible to kill explorer.exe and relaunch with administrative rights such as a admin level command prompt. something like:

Taskkill /F /IM explorer.exe & start C:\Windows\explorer.exe

From an administrative command prompt/shortcut might do it.

Once I found TechInLine I have been using that. But whats above is what I started looking at when thinking about rolling my own solution (by way of a vbs or batch script left on the remote system.

Hope this helps you roll your own solution if you need too.

Best Wishes
Matt

 

[ComputerRepairTech]

I'm sure others have seen this. It doesn't happen that often but every once in a while I'll have a customer that has turned UAC all the way up. When I try to run any programs the remote session hangs for about 1-2 min with a security prompt on their end asking if they want to allow the program. I can get around it by calling the customer and have them move the slider down to turn it off. I realize this is a security feature but I was just curious if anyone else has a way of turning off UAC remotely?

Try logging in with a windows admin account instead of ID and 4 digit passcode.

 

[YOCS]

I've been using TechInLine because of the same issues. Not have a UAC prompt in remote support since.

I did start to look at how to create shortcuts to tackle this. I found registry settings and a process relaunch approach.

I suspected that the remote support tools that don't suffer with UAC prompts might simply perhaps be setting the registry first and disabling on again on disconnect.

Registry/commandline
UAC Off

REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f

UAC On

REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f

However I'm not sure if this approach would take immediate effect. I imagine perhaps the hive would have to be reloaded. perhaps gpupdate would be the answer here.

Whilst not ideal at all, it's also possible to kill explorer.exe and relaunch with administrative rights such as a admin level command prompt. something like:

Taskkill /F /IM explorer.exe & start C:\Windows\explorer.exe

From an administrative command prompt/shortcut might do it.

Once I found TechInLine I have been using that. But whats above is what I started looking at when thinking about rolling my own solution (by way of a vbs or batch script left on the remote system.

Hope this helps you roll your own solution if you need too.

Best Wishes
Matt

Thanks Matt, I'm not sure but I think D7 turns those UAC keys off/on. I'll try and merge that "UAC off" key above the next time I run into this issue but I have a feeling I'll get the security prompt asking if I want to allow the registry merge in which case the remote session will lock up until the security prompt on the remote end times out. I guess it's not that big of a deal, I can call the customer and have them move the UAC slider down. I'll have to take a look at Techline though...Thanks!