Enforcing UAC

[Dave Harry]

Is there a group policy setting to enforce that local administrators do not
disable UAC?

I have found "Run all administrators in Admin Approval mode". But even if
that's set to enabled, can a local admin still disable UAC?

 

[John]

Take a look in gpedit---Comp Config--Windows Settings--Security
settings--local policies--User rights assignment.
You may need to create a new group to take over the admin rights for
whatever you choose to disable/enable. That way you can go back and change
thinds as they were.