I am trying to bring up several Win7 pro computers on a SBS 2003 domain. The computers join the domain fine, but when a non-admin user attempts to join the domain the UAC is triggered and administrative approval is required. The SBS administrator can log on to SBS from the Win7 machine without difficulty. A non-admin user with admin privileges or a standard user trigger the UAC. The user with admin privileges can, of course, click through the UAC, but logging the standard user on requires the admin password before log on can be completed. This is, of course, not acceptable. There appear to be two things happening: (1) the logging on causes SBS to send a setup.exe command to the Win7 computer which triggers the UAC, and (2) the Trend Micro software on the SBS sends an update command in the form of a ???.exe file to the Win7 machine. Since both the SBS 2003 and Win7 Pro are Microsoft products and there are undoubtedly thousands if not millions of these combinations operating throughout the world, I cannot believe I am the first one to confront this problem. There does not appear to be any way to add exceptions to UAC the way one can to Microsoft Firewall. Any suggestions would be helpful.

Go into the properties of the user account in Active Directory Users and Computes on the SBS machine, and delete the startup batch file in their logon profile. I forget what it's called (SBSSetup.bat or something) There is no harm in doing this for Vista and 7 machines on an SBS 2003 network, I have found. In fact it's the only way to avoid the annoying prompt. You can cancel out of the setup program with no ill effects, but it's ugly.