Authentication Settings and User Account Control

When configuring Management Utilities for an environment where User Account Control is enabled on Windows systems, features such as Client Deployment and Third Party Software Deployment require an additional authentication template. The Local Admin template uses the same authentication as the normal Domain Admin template, but the Install as local system option is checked, and three other options (Grant logon as service, Remove permissions when finished, Impersonate this user locally) must be unchecked. (It is also necessary to configure the Management Utilities server so that the Management Utilities service is run by a domain administrator rather than by Local System. Please refer to the SyAM Tool Tip on Management Utilities Configuration for UAC Environments.)