Find out which account disabled UAC

view full story

http://serverfault.com – Someone or something recently disabled UAC on a critical server and it is now asking for a reboot (which can not happen). Is there an event in the logs that will tell me which account disabled this? And can I re-enable it without rebooting to get rid of the 'reboot' prompt? Thanks. (HowTos)