I am trying to get my head around the best approach for managing UAC. What I WANT: Regular users are not Local Admins and have somewhat elevated UAC. Special "Install" user is Local Admin but not Domain Admin, has permissions for install resources on the network, and has reduced UAC to facilitate automated installs. But, so far as I can tell you can't use Group Policy to adjust UAC on a user or group basis. Which seems daft to me. So, what is the "correct" way to manage/use UAC in the context of also installing software? Does it require some special sauce with SCCM? Can PowerShell Remote Jobs work with effectively reduced UAC such that automation can work?