Knowledge Base > Automation Engine and Target Systems > Windows > User Account Control in Windows 2008 and Vista

User Account Control in Windows 2008 and Vista

If you intend to open programs via AE jobs that require "Elevation" (a higher authorization), you can do so by selecting the option log on as batch user.

No automatic elevation is possible if the batch mode is not activated. The Windows user under which the Job is executed requires the right to log on as batch job (System Control - Administration - Local Security Policy).

The relevant Job will automatically be elevated if it requires more authorization. Therefore, the user who is specified in the Login object must have the required authorizations. Note that all processes of the affected AE Job will be executed with these rights. If the relevant user does not have one or several of the required rights, the agent cannot execute all processes. Windows then aborts with the error 740 (elevation required).

On Windows 2012 you should also change the relevant entries in the registry. It is not sufficient to change the UAC privileges by using the control panel in Windows 2012.
For further details please refer to and observe Microsoft's information on registry setting changes.
Follow this link to Microsoft's own site for information on the registry settings, find the description of the key "EnableLUA" and set it to "0".

Comment

The Windows-UAC displays a message asking users to confirm execution of functions and programs, according to permissions that have been set for the respective user.

This behavior cannot be controlled via the Automation Engine. You should set the relevant permissions according to the notes on installation in the Automation Engine documentation relevant to Agents, Jobs, etc.