You can distribute policies to Vista machines with downlevel systems, but
since Windows 2000 is so old and has been out of mainstream support for
almost two years all the docs are focused on Windows Server 2003 domains. See
for example:
http://technet2.microsoft.com/Window....mspx?mfr=true
and
http://technet2.microsoft.com/window...p/default.mspx

Much of the same techniques may work with Windows 2000, but Microsoft has
not tested it. However it may work, you will need to create and edit the
policies for Windows Vista on a Windows Vista system. Windows 2000 does not
have the ability to create group policies managing the new features in Vista.
in fact, not even Windows Server 2003 has been endowed with that
functionality.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20


"Andy" wrote:

Jesper,

Thanks for the post and for making it easy to understand without talking
down, etc.

The server is a Win2K server so I guess the security policy won't have UAC
settings? (I really should take more server admin courses) At any rate both
the local and remote security policies for what you mentioned below were
"Not Defined", so I set the local one to disabled, restarted and that seems
to of fixed the issue.

Is there a way to set this policy on a win2k server? Our network has like 4
Vista machines, a couple XP and a couple 2K boxes, any basic recommendations
for this kind of envoirnments are welcome (weblinks are cool).

Thanks much,
Andy

"Jesper" wrote in message
...
I have Vista Business (32), I turned off UAC thinking i'd leave it off.
Recently (probably due to some program installation) I realized I was
clicking on UAC messages again.

Thinking I had re-enabled UAC, I checked the ctrl-panel, but UAC was off.
Checked to see if UAC was still bugging me, and it was. So I enabled UAC,
pressed OK (or just closed the window). Same messages, and UAC still
appears
to be off.

So Any ideas how I can reset this short of rolling back a couple weeks?
respond here, or email directly at andy at nortra-cables dot com.

Yes, I am connected to a domain, it's a small domain running Win2k
Server. I
don't know what system data to send, but if you need something posted,
just
let me know.

Is there possibly a domain policy that is changing the setting? Why don't
you run rsop.msc and look at the settings under Computer Configuration |
Windows Settings | Security Settings | Local Policies | Computer Options.
What is the "User Account Control: Run all administrators in Admin
Approval
Mode" set to? If it is not defined, run gpedit.msc and check the same
setting
there. That's the master switch for UAC.

---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20