Change UAC prompt Behavior for Standard Users in Windows  

    Change UAC prompt Behavior for Standard Users in Windows

    Change UAC prompt Behavior for Standard Users in Windows

    How to Change User Account Control (UAC) prompt Behavior for Standard Users in Windows
    Published by Category: User Accounts
    23 Apr 2020
    Designer Media Ltd

    How to Change User Account Control (UAC) prompt Behavior for Standard Users in Windows


    When User Account Control (UAC) is enabled, Windows prompts for consent or prompts for credentials of a valid local administrator account before starting a program or task that requires a full administrator access token. This prompt ensures that no malicious software can be silently installed or run.

    With the Always notify or Default UAC setting enabled, your desktop will be dimmed and switched to the secure desktop when you get an elevation request by the User Account Control (UAC) prompt.

    A user that is a member of the Administrators group can log on, browse the Web, and read e-mail while using a standard user access token. When the administrator needs to perform a task that requires the administrator access token, Windows 10 automatically prompts the user for Y/N approval. This prompt is called an elevation prompt for UAC consent prompt.

    The user experience for standard users is different from that of administrators in Admin Approval Mode. The recommended and more secure method of running Windows 10 is to make your primary user account a standard user account. Running as a standard user helps to maximize security for a managed environment. With the built-in UAC elevation component, standard users can easily perform an administrative task by entering valid credentials for a local administrator account. The default, built-in UAC elevation component for standard users is the UAC credential prompt.

    See also: How User Account Control works (Windows 10) | Microsoft Docs

    The User Account Control: Behavior of the elevation prompt for standard users local security policy determines the behavior of the UAC elevation prompt for standard users.

    The options are:

    Policy Description
    Automatically deny elevation requests When an operation requires elevation of privilege, an access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls.
    Prompt for credentials on the secure desktop When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.
    Prompt for credentials (Default) When an operation requires elevation of privilege, the user is prompted to enter an administrator user name and password. If the user enters valid credentials, the operation continues with the applicable privilege.

    This tutorial will show you how to change the User Account Control (UAC) prompt behavior only for standard users in Windows 7, Windows 8, or Windows 10.

    You must be signed in as an administrator to change the UAC prompt behavior for standard users.

    This will not affect the built-in Administrator account or administrators.



    Contents

    • Option One: Change UAC prompt Behavior for Standard Users in Local Security Policy
    • Option Two: Change UAC prompt Behavior for Standard Users using a REG file



    EXAMPLE: User Account Control (UAC) credential prompt
    Change UAC prompt Behavior for Standard Users in Windows-uac_credential_prompt.png





    OPTION ONE

    Change UAC prompt Behavior for Standard Users in Local Security Policy


    The Local Security Policy is only available in the Windows 7/8/10 Pro, Windows 7/8/10 Enterprise, and Windows 10 Education editions.

    All editions can use Option Two below.


    1 Open the Local Security Policy (secpol.msc).

    2 Expand open Local Policies and Security Options in the left pane of Local Security Policy, and double click/tap on the User Account Control: Behavior of the elevation prompt for standard users policy to edit it. (see screenshot below)

    Change UAC prompt Behavior for Standard Users in Windows-uac_behavior_for_standard_users_secpol-1.jpg

    3 Select the UAC behavior you want in the drop menu, and click/tap on OK. (see screenshot below)

    Change UAC prompt Behavior for Standard Users in Windows-uac_behavior_for_standard_users_secpol-2.jpg

    4 When finished, close the Local Security Policy window if you like.






    OPTION TWO

    Change UAC prompt Behavior for Standard Users using a REG file


    The downloadable .reg files below will modify the DWORD value in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

    ConsentPromptBehaviorUser DWORD

    0 = Automatically deny elevation requests
    1 = Prompt for credentials on the secure desktop
    3 = Prompt for credentials (default)


    1 Do step 2 (Automatically deny), step 3 (Prompt for credentials on secure desktop), or step 4 (DEFAULT - Prompt for credentials) below for what you would like to do.


    2 Set UAC Behavior for Standard Users to "Automatically deny elevation requests"

    A) Click/tap on the Download button below to download the file below, and go to step 5 below.

    Standard_users_UAC_Automatically_deny_elevation_requests.reg

    Download


    3 Set UAC Behavior for Standard Users to "Prompt for credentials on the secure desktop"

    A) Click/tap on the Download button below to download the file below, and go to step 5 below.

    Standard_users_UAC_Prompt_for_credentials_on_secure_desktop.reg

    Download


    4 Set UAC Behavior for Standard Users to "Prompt for credentials"

    This is the default setting.

    A) Click/tap on the Download button below to download the file below, and go to step 5 below.

    Standard_users_UAC_Prompt_for_credentials.reg

    Download


    5 Save the .reg file to your desktop.

    6 Double click/tap on the downloaded .reg file to merge it.

    7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    8 You can now delete the downloaded .reg file if you like.


    That's it,
    Shawn






  1. Posts : 10
    Windows 10
       #1

    2. Set UAC Behavior for Standard Users to "Elevate without prompting"
    This seems to be wrong.
    It should say:
    2. Set UAC Behavior for Standard Users to "Automatically deny elevation requests"
      My Computer


  2. Posts : 68,543
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Battleroyale said:
    This seems to be wrong.
    It should say:
    Oops. Thank you. Now corrected.
      My Computers


 

Tutorial Categories

Change UAC prompt Behavior for Standard Users in Windows Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:46.
Find Us




Windows 10 Forums