UAC in domain requires username and password each time

Hi all,

Been using Win7 since beta. However, i just now installed it at work and this is the first time i'm using win7 joined to a domain. I assuming being joined to a domain is what's causing the problem. The problem being that each time the UAC prompt comes up, i dont just get a yes/no click, i have to enter in my username and password each time. And it's the same user/pass that i'm logged in with.

Is there any way to do away with the requirement of having to enter my user/pass each time? I dont mind so much just having to click yes or no, but constantly having to re-enter my login info is getting annoying.

Tepid said:

I have not dealt with this, but,,, you may need to add yourself as an Admin to the local PC.

Since I have not done this in 7, maybe someone else can provide the way of doing it when joined to the domain.

However, are you a Domain User or Domain Admin?

Brink?

It doesnt matter if your a domain user or domain admin, also, Adding yourself as an Admin to the local PC doesnt work because authentication is delegated to the Domain since thats what you logged onto

You either have to reset the group policy being applied when you logon to auto-elevate administrators or start using biometic, token or card authentication as these will auto-authenticate you with Windows/UAC and your domain

Steven

I have added my domain account as a local admin on the pc. My domain account is NOT a domain admin, just an admin on the local machine. I assume that's working otherwise i'd think after entering in my domain name and password it wouldn't accept it unless it was an admin.

So is this not normal behavior from using win7 joined to a domain? Is there a security/system policy somewhere (on the domain i'd assume) that if set requires you to re-authenticate each time?

dmex said:

It doesnt matter if your a domain user or domain admin, also, Adding yourself as an Admin to the local PC doesnt work because authentication is delegated to the Domain since thats what you logged onto

You either have to reset the group policy being applied when you logon to auto-elevate administrators or start using biometic, token or card authentication as these will auto-authenticate you with Windows/UAC and your domain

Steven

I have added my domain account to be a local admin on the machine. Are you saying i have to keep re-typing my login info because my login credentials aren't read-able by the local pc?

If i try to open the group policy editor, it says i dont have permission. Is this because it's actually opening a group policy editor for the domain? if i login with my local account (also admin) can i make this change?

thanks for the help

if you're running on a 2k3 domain policy, the network admin will need to get the new gpolicy management console in order to provide your windows 7 machine it's necessary secpol settings. the current adm files are no longer sufficient for the new windows 7 or server 2k8 admx files. Once the group policy is setup properly on the domain your UAC will be disabled and you'll no longer be prompted all the time.

hmm, well then i guess something weird is going on since it's definitely prompting me for a user/pass with every uac prompt. You're saying as long as i made my domain account a local admin, i shouldn't see this behavior? any ideas where to start looking as to why it's acting this way? I dont want to disable UAC - i just want it to go back to a yes/no prompt.

oh you misunderstood - i have already added the domain account to the local admin account. I assume that part is working otherwise it would reject the user/pass for the uac prompt.

So maybe this isn't bug but some sort of design feature. I'll have to do some googling or post on the msdn forums and see what comes up. I'll post back here if i find an answer.