Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: UAC in domain requires username and password each time


28 Jan 2010   #1

windows 7 ultimate
 
 
UAC in domain requires username and password each time

Hi all,

Been using Windows 7 since beta. However, i just now installed it at work and this is the first time i'm using Windows 7 joined to a domain. I assuming being joined to a domain is what's causing the problem. The problem being that each time the UAC prompt comes up, i dont just get a yes/no click, i have to enter in my username and password each time. And it's the same user/pass that i'm logged in with.

Is there any way to do away with the requirement of having to enter my user/pass each time? I dont mind so much just having to click yes or no, but constantly having to re-enter my login info is getting annoying.

My System SpecsSystem Spec
.

28 Jan 2010   #2

Win 7 Ultimate 32bit
 
 

I have not dealt with this, but,,, you may need to add yourself as an Admin to the local PC.

Since I have not done this in 7, maybe someone else can provide the way of doing it when joined to the domain.

However, are you a Domain User or Domain Admin?

Brink?
My System SpecsSystem Spec
28 Jan 2010   #3

 

Quote   Quote: Originally Posted by Tepid View Post
I have not dealt with this, but,,, you may need to add yourself as an Admin to the local PC.

Since I have not done this in 7, maybe someone else can provide the way of doing it when joined to the domain.

However, are you a Domain User or Domain Admin?

Brink?
It doesnt matter if your a domain user or domain admin, also, Adding yourself as an Admin to the local PC doesnt work because authentication is delegated to the Domain since thats what you logged onto

You either have to reset the group policy being applied when you logon to auto-elevate administrators or start using biometic, token or card authentication as these will auto-authenticate you with Windows/UAC and your domain

Steven
My System SpecsSystem Spec
.


28 Jan 2010   #4

windows 7 ultimate
 
 

I have added my domain account as a local admin on the pc. My domain account is NOT a domain admin, just an admin on the local machine. I assume that's working otherwise i'd think after entering in my domain name and password it wouldn't accept it unless it was an admin.

So is this not normal behavior from using Windows 7 joined to a domain? Is there a security/system policy somewhere (on the domain i'd assume) that if set requires you to re-authenticate each time?
My System SpecsSystem Spec
28 Jan 2010   #5

windows 7 ultimate
 
 

Quote   Quote: Originally Posted by dmex View Post
It doesnt matter if your a domain user or domain admin, also, Adding yourself as an Admin to the local PC doesnt work because authentication is delegated to the Domain since thats what you logged onto

You either have to reset the group policy being applied when you logon to auto-elevate administrators or start using biometic, token or card authentication as these will auto-authenticate you with Windows/UAC and your domain

Steven
I have added my domain account to be a local admin on the machine. Are you saying i have to keep re-typing my login info because my login credentials aren't read-able by the local pc?

If i try to open the group policy editor, it says i dont have permission. Is this because it's actually opening a group policy editor for the domain? if i login with my local account (also admin) can i make this change?

thanks for the help
My System SpecsSystem Spec
28 Jan 2010   #6

 

if you're running on a 2k3 domain policy, the network admin will need to get the new gpolicy management console in order to provide your windows 7 machine it's necessary secpol settings. the current adm files are no longer sufficient for the new windows 7 or server 2k8 admx files. Once the group policy is setup properly on the domain your UAC will be disabled and you'll no longer be prompted all the time.
My System SpecsSystem Spec
28 Jan 2010   #7

Win 7 Ultimate 32bit
 
 

So,, effectively disabling UAC on the local machine? Is that necessary in a domain environment?

Well,, to my knowledge,, yes,, if you are doing things that are local to the system,, adding yourself as a local admin to the PC will make you an admin on that PC weather you are logged in as a Domain User or not. And should allow UAC to be cleared with a simple Yes or No instead of being prompted for userid and password. This is my understanding anyway, as unfortunately I have not had to deal with it yet on 7, but it is this way on XP.
My System SpecsSystem Spec
28 Jan 2010   #8

windows 7 ultimate
 
 

hmm, well then i guess something weird is going on since it's definitely prompting me for a user/pass with every uac prompt. You're saying as long as i made my domain account a local admin, i shouldn't see this behavior? any ideas where to start looking as to why it's acting this way? I dont want to disable UAC - i just want it to go back to a yes/no prompt.
My System SpecsSystem Spec
29 Jan 2010   #9

Win 7 Ultimate 32bit
 
 

Unfortunately I do not have a domain setup and don't plan on it for some time.
Yes,, if you add your Domain User account to the local admin group of the PC, it will give you admin rights on that PC.

You should be able to do it through Control Panel Users I think.

How this will affect UAC however, I do not know. I would think it should go back to just Yes/No and not prompt, but I don't know.
My System SpecsSystem Spec
29 Jan 2010   #10

windows 7 ultimate
 
 

oh you misunderstood - i have already added the domain account to the local admin account. I assume that part is working otherwise it would reject the user/pass for the uac prompt.

So maybe this isn't bug but some sort of design feature. I'll have to do some googling or post on the msdn forums and see what comes up. I'll post back here if i find an answer.
My System SpecsSystem Spec
Reply

 UAC in domain requires username and password each time




Thread Tools



Similar help and support threads for2: UAC in domain requires username and password each time
Thread Forum
Solved Password protected sharing is OFF, still asked for username/password? Network & Sharing
Can't Log On With My Username/Password General Discussion
my user name all of a sudden requires a password General Discussion
Solved Laptop suddenly requires password for log in General Discussion
Server requires user name and password General Discussion
blanc local password field now requires a password Network & Sharing
Wireless using WEP requires Username/Password- WHY? Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:05 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33