Windows Vista

About this task

To remotely install the IBM® BigFix® Remote Control target software in Windows Vista, password protected sharing must be disabled. To disable password protected sharing on Windows® Vista systems, perform the following steps:

Procedure

  1. Click Control Panel > Networking and Internet > Sharing and Discovery.
  2. Click the down arrow that is next to Password protected sharing.
  3. Click Turn off password protected sharing.
  4. Click Apply and exit the control panel.

Results

The new User Account Control feature in Windows Vista requires users to perform several steps before the remote install utility can communicate with Vista targets. If you have a domain user account, ensure that the controller and the target machine are both members of a Windows domain. You can select the File and Printer Sharing box and the remote registry box in the Exceptions tab of the Windows Firewall configuration to allow access if the firewall is enabled. If you are a member of a local administrators group and you use a local user account, complete the steps below to be able to perform administrative tasks on the target machine:

  1. Enable the built-in Administrator account and use it to connect.
    1. Open the Windows Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click Accounts: Administrator account status and select enable.
  2. Disable User Account Control if a different Administrator user account is to be used to connect to the Vista target. To disable User Account Control complete the following steps:
    1. Open the Windows Control Panel.
    2. Click Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options.
    3. Double-click User Account Control: Run all administrators in Admin Approval Mode and select disable. Changing this setting requires a system reboot.
  3. Disable User Account Control when you administer a workstation with a local user account (Security Account Manager user account). Otherwise, you cannot connect as a full administrator and cannot perform administrative tasks. To disable User Account Control complete the following steps:
    1. Click Start, click Run, type regedit, and press ENTER.
    2. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    3. If the LocalAccountTokenFilterPolicy registry entry does not exist, complete the following steps:
      1. On the Edit menu, point to New, and then click DWORD Value.
      2. Type LocalAccountTokenFilterPolicy, and press ENTER.
    4. Right-click LocalAccountTokenFilterPolicy, and click Modify.
    5. In the Value data box, type 1. Click OK.
    6. Restart your computer.
    Alternatively, you can modify the registry entry manually by typing the following command:

    cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f