Disables UAC without privilege escalation. NB. Must run from another host (mgmt).

Disable-UAC.ps1

##########
## 1. Save file on mgmt host.
##    - change 'COMPUTERNAME' to target hostname
##########

Configuration Disable-UAC {

    Import-DscResource -ModuleName PsDesiredStateConfiguration
    Import-DscResource -ModuleName xSystemSecurity -Name xUac

    Node 'COMPUTERNAME' {        
        xUAC NeverNotifyAndDisableAll {
            Setting = "NeverNotifyAndDisableAll"
        }
    }

}

Disable-UAC

Push-UAC-DSC.ps1

##########
## 2. Run the following commands on remote host.
##    - change 'COMPUTERNAME' to target hostname
##    - Use `$AdminCred = Get-Credential` as an alternative to .\CloudFormation-PowerShell-Creds.ps1
## 
##    *** WARNING *** - this script will reboot the target host without prompting
##    
##########
$TargetHost = "COMPUTERNAME"
Set-PSRepository -InstallationPolicy Trusted -Name "PSGallery"
Install-Module xSystemSecurity -Scope CurrentUser
$AdminCred = .\CloudFormation-PowerShell-Creds.ps1 -AccessCredential Admin -CredentialPath C:\Admin\Keys\CF-Creds-20171018T0954207027
$CIMSession = New-CimSession -ComputerName $TargetHost -Credential $AdminCred
Start-DscConfiguration -Path "C:\Users\Admin\Desktop\Disable-UAC" -CimSession $CIMSession -Wait -Verbose
Restart-Computer $TargetHost -Credential $AdminCred -Protocol WSMan -Force

Test-UAC.ps1

$UAC = Get-ItemProperty -Path "registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\policies\system" -Name EnableLUA
$UAC.EnableLUA
Start-Process -FilePath powershell.exe -verb RunAs -WorkingDirectory C: