How to create a Windows user suitable for installing db2 server with extended security?
Problem solved by setting

 Security options/User Account Control: run all administrators in admin approval mode = Disabled


in Local Security Policy