How to use UAC without domain admin account??

[tom12010]

I've set up Vista Business on a notebook used within an Active
Directory domain.with a domain user account as the main login user.

Then I added the domain administrator account to the local
Administrators group so I would not have to type in this information
every time UAC comes up.

This solution works for me since I am in IT per se, but is there
another better way to set up UAC such that I don't require the domain
admin account, but the local hidden Administrator account or even a
second local account with local domain admin rights?? (I do this on
Ultimate boxes at home.)

In short my question is how to make UAC as easy and simple as possible
for a domain user account without using a domain admin ID/password??

Thank you, Tom

 

[Dave Warren]

In message
<90272067-06ea-4195-85cf-f3e63dd290d9@o24g2000yqf.googlegroups.com>

I've set up Vista Business on a notebook used within an Active
Directory domain.with a domain user account as the main login user.

Then I added the domain administrator account to the local
Administrators group so I would not have to type in this information
every time UAC comes up.

This solution works for me since I am in IT per se, but is there
another better way to set up UAC such that I don't require the domain
admin account, but the local hidden Administrator account or even a
second local account with local domain admin rights?? (I do this on
Ultimate boxes at home.)

In short my question is how to make UAC as easy and simple as possible
for a domain user account without using a domain admin ID/password??

In short, you can't. In order for UAC to elevate without credentials
the user needs administrative rights to begin with.

Note that it doesn't really matter if you give out an administrative
password or just give people local administrator rights, the either way
users will have full administrative rights to do anything they want if
they so desire.