In our domain we have some Group Policies in place to turn off UAC and set local group memberships to: BUILTIN\Administrators group contains: <domain>\Domain Admins <domain>\XX-PC-Admin <local admin> BUILTIN\Power Users is defined with no members BUILTIN\Users group contains: <domain>\XX-PC-Users Now I don't know if UAC or the security permissions above would cause this issue but I've included it for reference. On our Windows 7 computers, a user with local admin rights gets an "Access Denied" error when they try to install any drivers, regardless of if they are signed or un-signed. We know this is not an incompatibility between the driver in question and Windows 7 because we can successfully install the driver on a Windows 7 computer that is NOT joined to the domain. Does anyone know of a policy/permission that would prevent a user with Admin permission from installing a driver? More info can be provided if requested.

Hi, Thanks for posting in Microsoft TechNet Forum. As I understand that you encounter the situation that the local administrator cannot install any drivers. With UAC enabled, members of the local Administrators group with the same access token as standard users, it means, have the limited administrative privileges and user rights, they cannot install or uninstall applications that install into %systemroot%. Only when a member of the local Administrators group gives approval can a process use the administrator’s full access token. I recommend you disable the UAC to see if it works, if works, please give the approval to the local administrator and enable UAC again for security. Please feel free to give me any update. Best Regards, Miya Yao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

We have already turned OFF UAC for all domain workstations as a permanent setting. Any ideas if UAC isn't the cause?

Hi, Do you resolve the problem? Please feel free to give me any update. Regards, Miya This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.