Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So... Apparently Windows has a list of filenames that require extra rights to run, included in this list is Update.exe, which happens to be the name of the file I'd like my clients to run without appealing to UAC.

I'd like to not give the advice "Just turn off UAC".

Is there a place in Windows Group Policies Editor (or whatever it's called since I switched to linux, where this kind of arbitrary file restriction is totally unheard of) where a sysadmin can say, "Turn off UAC for c:\xyz\update.exe"?

Related question on StackOverflow

share|improve this question

For windows updates you can allow non admins the ability to use the tool by configuring the policy 'Allow non-administrators to receive update notifications' (Available in Computer Configuration/Administrative Templates/Windows Components/Windows Update).

To my knowledge there is no ability to turn off UAC prompting for a system defined EXE.

share|improve this answer
Aww man, isn't there a group policy for everything? – Peter Turner Oct 15 '10 at 20:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.