Configuring user account control

The new User Account Control feature in Windows® Vista requires users to complete several steps before the remote installation utility can communicate with Vista targets.

About this task

If you have a domain user account, ensure that the controller and the target computers are both members of a Windows® domain. If you are a member of a local administrators group and you use a local user account, complete the following steps so that you can run administrative tasks on the target computer:

Procedure

  1. Enable the built-in Administrator account and use it to connect.
    1. Open the Windows® Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click Accounts: Administrator account status and select enable.
  2. Disable User Account Control if a different Administrator user account is to be used to connect to the Vista target. To disable User Account Control, complete the following steps: -
    1. Open the Windows® Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click User Account Control: Run all administrators in Admin Approval Mode and select disable. Changing this setting requires a system restart.
  3. Disable User Account Control when you administer a workstation with a local user account (Security Account Manager user account). Otherwise, you cannot connect as a full administrator and cannot run administrative tasks. To disable User Account Control, complete the following steps:-
    1. Click Start, click Run, type regedit, and press ENTER.
    2. Locate and then click the following registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    3. If the LocalAccountTokenFilterPolicy registry entry does not exist, follow these steps:
      1. On the Edit menu, click New, and then click DWORD Value.
      2. Type LocalAccountTokenFilterPolicy, and press ENTER.
    4. Right-click LocalAccountTokenFilterPolicy, and click Modify.
    5. In the Value data box, type 1. Click OK.
    6. Restart your computer.
    Alternatively, you can modify the registry entry manually by typing the following command: 
    cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system
 /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f