Can PDQ Inventory determine if a Windows system has UAC enabled?

Hi Jason,

Yes. The UAC value is stored in the registry under HKEY_LOCAL_SYSTEM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

The value is called EnableLUA

A value of 1 = UAC Enabled
A value of 0 = UAC Disabled

Import the attached files. (Pro mode is required to use Scan Profiles). Two collections will be created called Windows 7 UAC Enabled and Windows 7 UAC NOT Enabled. The scan profile is one I keep around called Misc. Registry. Delete the scanners in there that you don't want.

Scan all your Windows 7 computers with this scan profile. I didn't include a filter for 64-bit Windows 7. If you want that just create a new Group Filter (under the top most group filter) and under that create a value filter showing requiring a 64-bit OS.

-Shane

Here is a screenshot of the Windows 7 UAC Enabled collection filters:

Here is the UAC scanner in the Misc. Registry scan profile.

You might find this info useful:

http://support.dataaccess.com/Forums/entry.php?78-Programmatically-find-out-if-UAC-is-turned-ON
http://stackoverflow.com/questions/95510/how-to-detect-whether-vista-uac-is-enabled
http://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/26862da6-966b-4c53-8b05-063f8cd1be76/how-can-i-get-the-system-uac-status

Pretty cool,

Thanks Shane.

Now that I have found it...  How do I use PDQ to Disable it?

I made just a simple command line job with the following command:  C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

I have this job run against my collections every morning.

Good call, Jason.