Disabling user account control (UAC) · MaxPatrol SIEM

Setting up sourcesOperating systems. Event collectionMicrosoft Windows Server 2003, 2003 R2: source configuration

Disabling user account control (UAC)

To disable user account control (UAC):Click Start → Run.In the Open box, enter regedit, and click OK.The Registry Editor window opens.In the left pane, select the node HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.On the main menu, click Edit → New → DWORD (32-bit) Value.Enter the name of the newly created value: LocalAccountTokenFilterPolicy.

Creating the LocalAccountTokenFilterPolicy value

On the main menu, click Edit → Modify.Under Base, select Decimal.In the Value data box, enter 1, and click OK.

Setting the LocalAccountTokenFilterPolicy value

User account control is disabled.