Configuring User Account Control features for remote target installation

About this task

The User Account Control feature in Windows® 7 requires users to complete several steps before the remote installation utility can communicate with Windows 7 targets. If you have a domain user account, ensure that the controller and the target computers are both members of a Windows domain. You can select the File and Printer Sharing box and the remote registry box in the Exceptions tab of the Windows Firewall configuration, to allow access if the firewall is enabled. If you are a member of a local administrators group and you use a local user account, complete the following steps so that you can run administrative tasks on the target computer:

Procedure

  1. Enable the built-in Administrator account and use it to connect.
    1. Open the Windows Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click Accounts: Administrator account status and select enable.
  2. Disable User Account Control if a different Administrator user account is to be used to connect to the Windows 7 target. To disable User Account Control, complete the following steps:
    1. Open the Windows Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click User Account Control: Run all administrators in Admin Approval Mode and select disable. Changing this setting requires a system restart.
  3. Disable User Account Control when you administer a workstation with a local user account (Security Account Manager user account). Otherwise, you cannot connect as a full administrator and cannot run administrative tasks. To disable User Account Control, complete the following steps:
    1. Click Start > Run, type regedit, and press ENTER.
    2. Locate and click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    3. If the LocalAccountTokenFilterPolicy registry entry does not exist, complete the following steps:
      1. On the Edit menu, select New, and then click DWORD Value.
      2. Type LocalAccountTokenFilterPolicy, and press ENTER.
    1. Right-click LocalAccountTokenFilterPolicy and click Modify.
    2. Type 1 n the Value data box. Click OK.
    3. Restart your computer.
    Alternatively, you can modify the registry entry manually by typing the following command:
    cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system
     /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f