Prepare machines for remote installation of Acronis Snap Deploy components

• If you are running Windows 10, disable User Account Control (UAC) or enable and use the built-in administrator.
  
  Disable UAC:

  1. Click Start -> Control Panel.
  2. Select User Accounts.
  3. Click Change User Account Control.
  4. Move the slider to the bottom (Never notify me).

  Enable the built-in administrator:

  The built-in administrator does not receive UAC prompts, which is why you can install Acronis Agents remotely using the built-in admin as an alternative to disabling UAC.

  1. Click Start -> Search -> cmd
  2. Right-click the Command Prompt and select "run as administrator".
  3. Run the command net user to display a list of all user accounts on the system.
  4. To activate the inactive administrator account, run the command net user administrator /active:yes
  5. Now the built-in administrator is enabled. It has no password by default. You can specify the password in Start -> Control Panel -> User Accounts.
  6. Use this account while installing Acronis Agents remotely.

• If you are running Windows Vista, Windows 7 or Windows 8 and you are not in domain environment, disable User Account Control (UAC) on the machine:
  
  Disable UAC:

  Windows Vista

  1. Click Start -> Control panel:

     

  2. Click User Accounts:

     

  3. Click User Accounts again:

     

  4. Click Turn User Account Control on or off:

     

  5. Uncheck the box and click OK:

     

  6. Reboot the machine:

     

  Windows 7

  1. Click Start and type in user account control. Select Change User Account Control settings:

     

  2. Drag the bar down to Never notify:

     

  3. Reboot the machine.

  Windows 8

  Disable UAC remote restrictions (as per http://support.microsoft.com/kb/951016):

  1. Hit Start-Run, type in regedit and press Enter
  2. Locate and then click the following registry subkey:

     HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

  3. If the LocalAccountTokenFilterPolicy registry entry does not exist, follow these steps:
     • On the Edit menu, point to New, and then click DWORD Value.
     • Type LocalAccountTokenFilterPolicy, and then press Enter.
  4. Right-click LocalAccountTokenFilterPolicy, and then click Modify.
  5. In the Value data box, type 1, and then click OK.

• If you are running Windows XP, disable the following option on the machine:

  Control panel -> Folder options -> View -> Use simple file sharing

• File and Printer Sharing must be enabled on the remote machine:
  • Windows XP, Windows 2003 Server: Control panel -> Windows Firewall -> Exceptions -> File and Printer Sharing
  • Windows Vista, Windows Server 2008, Windows Server 2012 Windows 7, Windows 8: Control panel -> Windows Firewall -> Network and Sharing Center -> Change advanced sharing settings
• Acronis Snap Deploy uses TCP ports 445 and 25001 for remote installation. Make sure that these ports are added to exceptions in the firewall settings on the remote machines. TCP port 445 is added to exceptions automatically by Windows Firewall when you enable File and Printer Sharing.

  To add a port to exceptions:

  • In Windows XP, Windows Vista: Control panel -> Windows Firewall -> Exceptions -> Add Port
  • In Windows 7, Windows 8: Control panel -> Windows Firewall -> Advanced settings -> Inbound Rules -> New Rule -> Port

    If the remote machines are members of an Active Directory domain and use no firewall other than Windows Firewall, you can add TCP port 25001 to exceptions by using Group Policy. On a domain controller, create a Group Policy object, then go to Administrative Templates -> Network -> Network Connections -> Windows Firewall -> Domain Profile -> Windows Firewall: Define port exceptions (or: Define inbound port exceptions), and then add the following port exception:

    25001:tcp:*:enabled:Acronis remote install