HP Network Configuration Utility (10.90.0.0) and UAC

[Ziestaul]

We are currently in the process of hardening our servers (enforced company regulation policy so cannot be averted) and we are experiencing issues when we turn on UAC whereby we cannot access the network configuration utility. For clarification we are applying these changes via group policy.

1.The icon does not present itself on the taskbar.

2.When attempting to access the NCU via control panel we receive an error informing that we do not have the required pemissions to run. Presumably this is UAC preventing us from running the NCU.

3.Network connectivity fails, and the only way to access the server from this point is via the iLO.

4.When removing the hardening GPO containing the UAC settings and peforming a gpupdate /force and then rebooting the server, the NCU returns to its correct state and is accessible again.

Is running the NCU software while UAC is switched on a supported configuration ?. If so, is there any reason why this does not work and is there a work around?

Please note: Turning UAC off is not an option as company/industry regulations dictate we must harden all servers this way.

The policies we are applying are:-

User Account Control: Admin Approval Mode for the Built-in Administrator account - Enabled
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop - Disabled
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode - Prompt for consent for non-Windows binaries
User Account Control: Detect application installations and prompt for elevation - Enabled
User Account Control: Only elevate executables that are signed and validated - Disabled
User Account Control: Only elevate UIAccess applications that are installed in secure locations - Enabled
User Account Control: Run all administrators in Admin Approval Mode - Enabled
User Account Control: Switch to the secure desktop when prompting for elevation - Enabled
User Account Control: Virtualize file and registry write failures to per-user locations - Enabled

The Hardware is Dl380 G8 running Windows 2008R2. NCU version 10.90.0.0.

Many Thanks for any help you can offer.

[waaronb]

The only suggest I can come up with is to run the NCU as an administrator when needed.  Forget having it show up in the taskbar, although if you *needed* it there, you might take it out of the "run" in the registry and add it to the "Startup" group with "run as administrator" checked for the shortcut.  With your UAC settings it'll prompt to run as an admin each time you logon which could be annoying, so unless you really *NEED* it in the taskbar, just don't have it run automatically at all.  Launch it manually as an admin if you need to look at it or change anythning.