Configuring User Account Control features for remote target installation

About this task

The User Account Control feature in Windows® 7 requires users to complete several steps before the remote installation utility can communicate with Windows® 7 targets. If you have a domain user account, ensure that the controller and the target computers are both members of a Windows® domain. You can select the File and Printer Sharing box and the remote registry box in the Exceptions tab of the Windows® Firewall configuration, to allow access if the firewall is enabled. If you are a member of a local administrators group and you use a local user account, complete the following steps so that you can run administrative tasks on the target computer:

Procedure

  1. Enable the built-in Administrator account and use it to connect.
    1. Open the Windows® Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click Accounts: Administrator account status and select enable.
  2. Disable User Account Control if a different Administrator user account is to be used to connect to the Windows® 7 target. To disable User Account Control, complete the following steps:
    1. Open the Windows® Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click User Account Control: Run all administrators in Admin Approval Mode and select disable. Changing this setting requires a system restart.
  3. Disable User Account Control when you administer a workstation with a local user account (Security Account Manager user account). Otherwise, you cannot connect as a full administrator and cannot run administrative tasks. To disable User Account Control, complete the following steps:
    1. Click Start > Run, type regedit, and press ENTER.
    2. Locate and click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    3. If the LocalAccountTokenFilterPolicy registry entry does not exist, complete the following steps:
      1. On the Edit menu, select New, and then click DWORD Value.
      2. Type LocalAccountTokenFilterPolicy, and press ENTER.
    1. Right-click LocalAccountTokenFilterPolicy and click Modify.
    2. Type 1 n the Value data box. Click OK.
    3. Restart your computer.
    Alternatively, you can modify the registry entry manually by typing the following command: 
    cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system
 /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f