How to Change User Account Control (UAC) Settings in Windows 10

User Account Command (UAC) helps prevent malware from damaging a reckoner and helps organizations deploy a amend-managed desktop environment. With UAC, apps and tasks always run in the security context of a not-administrator account, unless an administrator specifically authorizes administrator-level access to the system. UAC tin can block the automatic installation of unauthorized apps and prevent inadvertent changes to system settings.

With the Always notify or Default UAC setting enabled, your desktop will be switched to the dimmed secure desktop when you get an elevation request past the User Business relationship Control (UAC) prompt.

UAC allows all users to log on to their computers using a standard user account. Processes launched using a standard user token may perform tasks using access rights granted to a standard user. For case, File Explorer automatically inherits standard user level permissions. Additionally, whatever apps that are started using File Explorer (for example, past double-clicking a shortcut) as well run with the standard gear up of user permissions. Many apps, including those that are included with the operating organisation itself, are designed to work properly in this way.

Other apps, particularly those that were not specifically designed with security settings in mind, often require boosted permissions to run successfully. These types of apps are referred to as legacy apps. Additionally, actions such equally installing new software and making configuration changes to the Windows Firewall, crave more permissions than what is bachelor to a standard user business relationship.

When an app needs to run with more standard user rights, UAC can restore boosted user groups to the token. This enables the user to have explicit control of apps that are making system level changes to their computer or device.

A user that is a member of the Administrators grouping can log on, browse the Spider web, and read e-postal service while using a standard user access token. When the administrator needs to perform a job that requires the administrator admission token, Windows 10 automatically prompts the user for Y/N approval. This prompt is called an height prompt (UAC).

When UAC is enabled, the user experience for standard users is unlike from that of administrators in Admin Approval Mode. The recommended and more secure method of running Windows ten is to make your primary user business relationship a standard user account. Running as a standard user helps to maximize security for a managed surround. With the built-in UAC elevation component, standard users can easily perform an administrative task past inbound valid credentials for a local ambassador business relationship. The default, built-in UAC tiptop component for standard users is the credential prompt.

Reference: User Account Control (Windows x)

Past default, UAC is set to notify you whenever apps try to brand changes to your PC, simply you tin change how oftentimes UAC notifies you.

In Windows 10, User Business relationship Control has added some improvements.

  • Integration with the Antimalware Scan Interface (AMSI). The AMSI scans all UAC acme requests for malware. If malware is detected, the admin privilege is blocked.

When you are prompted to enter your credentials or elevate a program starting with Windows 10 Insider Preview Build 14328, you will notice the dialog now has a fresh and modernistic UI to align with the design language in use beyond Windows 10. And now when prompted to enter credentials, y'all tin choose to sign-in with Windows How-do-you-do, a Pivot, certificates or a elementary password.

This table describes each UAC setting and how it can impact your PC'south security.

Setting Description Security impact
Always notify me (recommended)
  • You'll be notified earlier apps brand changes to your PC or to Windows settings that require administrator permissions.
  • When you're notified, your screen will exist dimmed, and you lot must either approve or deny the request in the UAC dialog box before you tin can do anything else on your PC.
  • This is the most secure setting.
  • When you lot're notified, yous should carefully read the contents of each dialog box before allowing changes to be fabricated to your PC.
  • Standard users will exist prompted to enter an administrator's password to approve.
Notify me only when apps try to make changes to my computer (default)
  • You lot'll be notified before apps make changes to your PC that crave administrator permissions.
  • You'll exist notified if an app tries to brand changes to a Windows setting.
  • You won't be notified if y'all effort to make changes to Windows settings that require administrator permissions.
  • Information technology's ordinarily safe to allow changes to be made to Windows settings without y'all being notified. Withal, certain apps that come with Windows tin have commands or data passed to them, and malicious software can take advantage of this by using these apps to install files or alter settings on your PC. Y'all should always exist conscientious about which apps you allow to run on your PC.
  • Standard users will be prompted to enter an ambassador'due south password to corroborate.
Notify me only when apps effort to make changes to my computer (don't dim my desktop)
  • You lot'll be notified earlier apps make changes to your PC that require administrator permissions.
  • You'll be notified if an app tries to brand changes to a Windows setting.
  • You won't exist notified if you try to make changes to Windows settings that require administrator permissions.
  • This setting is the same as "Notify me only when apps try to make changes to my calculator," but your desktop won't become dimmed.
  • If y'all choose this choice, other apps might be able to interfere with the visual appearance of the UAC dialog box. This is a security risk, particularly if there'due south malware on your PC.
  • Standard users will be prompted to enter an ambassador's password to approve.
Never notify me
(turn off UAC)
  • You won't be notified before any changes are made to your PC.
  • If you lot're signed in as an administrator, apps can make changes to your PC without your knowledge.
  • If you're signed in every bit a standard user, any changes that require administrator permissions will automatically be denied, or still be prompted by UAC.
  • This is the to the lowest degree secure setting. When you set UAC to never notify, you open upward your PC to potential security risks.
  • If y'all set UAC to never notify, you should be conscientious nigh which apps you run, because they'll have the same access to the PC as you do. This includes reading and making changes to protected arrangement areas, your personal data, saved files, and anything else stored on the PC. Apps volition likewise be able to communicate and transfer info to and from anything your PC connects with, including the Internet.

This tutorial will show you lot how to change User Account Control (UAC) settings for when users are to be notified about changes to your computer in Windows 10.

You must be signed in as an administrator to be able to change UAC settings.

How to Gear up UAC prompt has greyed out or missing Aye button in Windows 10

Contents


  • Pick One: Change User Account Control Settings in Command Panel
  • Selection Two: Alter User Account Control Settings using a REG file

EXAMPLE: User Account Control prompt

(Administrator)
Change User Account Control (UAC) Settings in Windows 10-uac_administrator.png

(Standard user)
Change User Account Control (UAC) Settings in Windows 10-uac_standard_user.png

Selection ONE

Change User Account Control Settings in Control Panel

1 Open the Control Panel (icons view), and click/tap on the User Accounts icon.

2 Click/tap on the Change User Account Control settings link. (come across screenshot below)

This will open the C:\Windows\System32\UserAccountControlSettings.exe file.

Change User Account Control (UAC) Settings in Windows 10-uac-1.jpg

3 If prompted by UAC, click/tap on Yes.

4 Motility the slider upward or down to the setting for how yous want to be notified past UAC, and click/tap on OK. (see screenshots below)

v If prompted by UAC, click/tap on Aye.

6 When finished, y'all can close User Accounts if you like. (encounter screenshot below stride 2)

OPTION TWO

Change User Business relationship Command Settings using a REG file

i Exercise stride two, step 3, stride 4, or step 5 below for how yous want to be notified by UAC.

2 For "Always notify me"

A) Click/tap on the Download button beneath to download the .reg file beneath, and become to step six beneath.

UAC_Always_Notify.reg

Download

iii For "Notify me but when apps try to make changes to my calculator (default)"

A) Click/tap on the Download button below to download the .reg file below, and go to step 6 below.

UAC_Default.reg

Download

four For "Notify me only when apps effort to make changes to my calculator (don't dim my desktop)"

A) Click/tap on the Download button below to download the .reg file beneath, and get to step 6 beneath.

UAC_Do-Not-Dim.reg

Download

five For "Never notify me"

A) Click/tap on the Download button beneath to download the .reg file beneath, and go to step 6 below.

UAC_Never_Notify.reg

Download

6 Salve the .reg file to your desktop.

7 Double click/tap on the downloaded .reg file to merge it.

8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

9 When finished, you tin can delete the downloaded .reg file if y'all similar.

That's it,
Shawn

  • Windows 11 Tutorials