I have a server 2012 system we want to use for our desktop support personnel to run Active Directory User and Computers. We do not want them running it on their own desktop (pass the hash concerns), and we do not want them to have administrator rights to the server 2012 box.
The user can log on just fine, but when they run anything that requires the MMC, they get prompted for User Account Control. Since the MMC.exe allows users read and execute, I don't understand what is triggering the UAC prompt. Even if the user just runs MMC.EXE the UAC is prompting.
Any ideas why MMC would be acting this way on a server 2012 box?