Deactivating UAC in Windows 2008 R2 was possible via running msconfig (for example winkey+r -> msconfig), going to the Tools
According to this Veeam document, and implied by this Microsoft document, a restored (or cloned) DC will boot into DSRM, and there's