This tutorial will show you how to change User Account Control (UAC) settings in Windows 11.
User Account Control (UAC) helps prevent malware from damaging a PC and helps organizations deploy a better-managed desktop. With UAC, apps and tasks always run in the security context of a non-administrator account, unless an administrator specifically authorizes administrator-level access to the system. UAC can block the automatic installation of unauthorized apps and prevent inadvertent changes to system settings.
UAC allows all users to log on to their computers using a standard user account. Processes launched using a standard user token may perform tasks using access rights granted to a standard user. For instance, Windows Explorer automatically inherits standard user level permissions. Additionally, any apps that are started using Windows Explorer (for example, by double-clicking a shortcut) also run with the standard set of user permissions. Many apps, including those that are included with the operating system itself, are designed to work properly in this way.
Other apps, especially those that were not specifically designed with security settings in mind, often require additional permissions to run successfully. These types of apps are referred to as legacy apps. Additionally, actions such as installing new software and making configuration changes to the Windows Firewall, require more permissions than what is available to a standard user account.
When an app needs to run with more than standard user rights, UAC can restore additional user groups to the token. This enables the user to have explicit control of apps that are making system level changes to their computer or device.
Starting with Windows 11 build 27718.1000 (Canary), you can now enable Administrator Protection to use for Admin Approval Mode (aka: elevated rights) instead of User Account Control (UAC).
| UAC setting | Description |
|---|---|
| Always notify |
|
| Notify me only when programs try to make changes to my computer (default) |
|
| Notify me only when programs try to make changes to my computer (do not dim my desktop) |
|
| Never notify (Disable UAC) |
|
References:
User Account Control
Learn how User Account Control (UAC) helps to prevent unauthorized changes to Windows devices.
learn.microsoft.com
User Account Control settings and configuration
Learn about the User Account Control settings and how to configure them via Intune, CSP, group policy, and registry.
learn.microsoft.com
How User Account Control works
Learn about User Account Control (UAC) components and how it interacts with the end users.
learn.microsoft.com
You must be signed in as an administrator to change User Account Control (UAC) settings.
Contents
- Option One: Change User Account Control settings in Control Panel
- Option Two: Change User Account Control settings using REG file
EXAMPLE: User Account Control prompt
1 Open the Control Panel (icons view), and click/tap on the User Accounts icon.
2 Click/tap on the Change User Account Control settings link. (see screenshot below)
This will open the C:\Windows\System32\UserAccountControlSettings.exe file.
3 Move the slider up or down to the setting for how you want to be notified by UAC, and click/tap on OK. (see screenshots below)
4 If prompted by UAC, click/tap on Yes.
5 You can now close the Control Panel if you like.
1 Do step 2, step 3, step 4, or step 5 below for how you want to be notified by UAC.
2 For "Always notify me"
A) Click/tap on the Download button below to download the file below, and go to step 6 below.
UAC_Always_Notify.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=dword:00000001
"EnableLUA"=dword:00000001
"ConsentPromptBehaviorAdmin"=dword:000000023 For "Notify me only when apps try to make changes to my computer (default)"
This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 6 below.
UAC_Default.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=dword:00000001
"EnableLUA"=dword:00000001
"ConsentPromptBehaviorAdmin"=dword:000000054 For "Notify me only when apps try to make changes to my computer (don't dim my desktop)"
A) Click/tap on the Download button below to download the file below, and go to step 6 below.
UAC_Do-Not-Dim.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=dword:00000000
"EnableLUA"=dword:00000001
"ConsentPromptBehaviorAdmin"=dword:000000055 For "Never notify me"
A) Click/tap on the Download button below to download the file below, and go to step 6 below.
UAC_Never_Notify.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=dword:00000000
"EnableLUA"=dword:00000001
"ConsentPromptBehaviorAdmin"=dword:000000006 Save the .reg file to your desktop.
7 Double click/tap on the downloaded .reg file to merge it.
8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
9 You can now delete the downloaded .reg file if you like.
That's it,
Shawn Brink
Related Tutorials
- Enable or Disable Administrator Protection for Admin Approval Mode in Windows 11
- Enable or Disable Enhanced Sign-in Security in Windows 11
- Enable or Disable UAC for Built-in Administrator in Windows 11
- Change UAC Behavior for Standard Users in Windows 11
- Change UAC Behavior for Administrators in Windows 11
- Enable or Disable Show Administrators in UAC prompt for Standard Users in Windows 11
- Run as administrator in Windows 11
- Check if App or Process is Running as Administrator (elevated) in Windows 11
- Create Elevated Shortcut without UAC prompt in Windows 11
Last edited:
