Windows 10: Change User Account Control (UAC) Settings in Windows 10  

    Change User Account Control (UAC) Settings in Windows 10

    Change User Account Control (UAC) Settings in Windows 10

    How to Change User Account Control (UAC) Settings in Windows 10
    Published by Category: Security System
    31 Jul 2017
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 23,602

    Show Printable Version 


    How to Change User Account Control (UAC) Settings in Windows 10

    information   Information
    User Account Control (UAC) helps prevent malware from damaging a computer and helps organizations deploy a better-managed desktop environment. With UAC, apps and tasks always run in the security context of a non-administrator account, unless an administrator specifically authorizes administrator-level access to the system. UAC can block the automatic installation of unauthorized apps and prevent inadvertent changes to system settings.

    UAC allows all users to log on to their computers using a standard user account. Processes launched using a standard user token may perform tasks using access rights granted to a standard user. For instance, Windows Explorer automatically inherits standard user level permissions. Additionally, any apps that are started using Windows Explorer (for example, by double-clicking a shortcut) also run with the standard set of user permissions. Many apps, including those that are included with the operating system itself, are designed to work properly in this way.

    Other apps, especially those that were not specifically designed with security settings in mind, often require additional permissions to run successfully. These types of apps are referred to as legacy apps. Additionally, actions such as installing new software and making configuration changes to the Windows Firewall, require more permissions than what is available to a standard user account.

    When an app needs to run with more than standard user rights, UAC can restore additional user groups to the token. This enables the user to have explicit control of apps that are making system level changes to their computer or device.

    Reference: User Account Control (Windows 10)


    By default, UAC is set to notify you whenever apps try to make changes to your PC, but you can change how often UAC notifies you.

    In Windows 10, User Account Control has added some improvements.
    • Integration with the Antimalware Scan Interface (AMSI). The AMSI scans all UAC elevation requests for malware. If malware is detected, the admin privilege is blocked.

    When you are prompted to enter your credentials or elevate a program starting with Windows 10 Insider Preview Build 14328, you will notice the dialog now has a fresh and modern UI to align with the design language in use across Windows 10. And now when prompted to enter credentials, you can choose to sign-in with Windows Hello, a PIN, certificates or a simple password.

    This tutorial will show you how to change User Account Control (UAC) settings for when to be notified about changes to your computer in Windows 10.

    You must be signed in as an administrator to be able to change UAC settings.

    Note   Note
    This table describes each UAC setting and how it can impact your PC's security.

    Setting Description Security impact
    Always notify me (recommended)
    • You'll be notified before apps make changes to your PC or to Windows settings that require administrator permissions.
    • When you're notified, your screen will be dimmed, and you must either approve or deny the request in the UAC dialog box before you can do anything else on your PC.
    • This is the most secure setting.
    • When you're notified, you should carefully read the contents of each dialog box before allowing changes to be made to your PC.
    • Standard users will be prompted to enter an administrator's password to approve.
    Notify me only when apps try to make changes to my computer (default)
    • You'll be notified before apps make changes to your PC that require administrator permissions.
    • You'll be notified if an app tries to make changes to a Windows setting.
    • You won't be notified if you try to make changes to Windows settings that require administrator permissions.
    • It's usually safe to allow changes to be made to Windows settings without you being notified. However, certain apps that come with Windows can have commands or data passed to them, and malicious software can take advantage of this by using these apps to install files or change settings on your PC. You should always be careful about which apps you allow to run on your PC.
    • Standard users will be prompted to enter an administrator's password to approve.
    Notify me only when apps try to make changes to my computer (don't dim my desktop)
    • You'll be notified before apps make changes to your PC that require administrator permissions.
    • You'll be notified if an app tries to make changes to a Windows setting.
    • You won't be notified if you try to make changes to Windows settings that require administrator permissions.
    • This setting is the same as "Notify me only when apps try to make changes to my computer," but your desktop won't get dimmed.
    • If you choose this option, other apps might be able to interfere with the visual appearance of the UAC dialog box. This is a security risk, especially if there's malware on your PC.
    • Standard users will be prompted to enter an administrator's password to approve.
    Never notify me
    • You won't be notified before any changes are made to your PC.
    • If you're signed in as an administrator, apps can make changes to your PC without your knowledge.
    • If you're signed in as a standard user, any changes that require administrator permissions will automatically be denied.
    • This is the least secure setting. When you set UAC to never notify, you open up your PC to potential security risks.
    • If you set UAC to never notify, you should be careful about which apps you run, because they'll have the same access to the PC as you do. This includes reading and making changes to protected system areas, your personal data, saved files, and anything else stored on the PC. Apps will also be able to communicate and transfer info to and from anything your PC connects with, including the Internet.


    CONTENTS:
    • Option One: Change User Account Control Settings in Control Panel
    • Option Two: Change User Account Control Settings using a REG file


    EXAMPLE: User Account Control prompt

    (Administrator)
    Name:  UAC_administrator.png
Views: 11838
Size:  19.0 KB


    (Standard user)
    Name:  UAC_standard_user.png
Views: 11895
Size:  23.3 KB







    Change User Account Control (UAC) Settings in Windows 10 OPTION ONE Change User Account Control (UAC) Settings in Windows 10
    Change User Account Control Settings in Control Panel

    1. Open the Control Panel (icons view), and click/tap on the User Accounts icon.

    2. Click/tap on the Change User Account Control settings link. (see screenshot below)
    Note   Note
    This will open the C:\Windows\System32\UserAccountControlSettings.exe file.


    Click image for larger version. 

Name:	UAC-1.jpg 
Views:	9626 
Size:	59.1 KB 
ID:	10479

    3. If prompted by UAC, click/tap on Yes.

    4. Move the slider up or down to the setting for how you want to be notified by UAC, and click/tap on OK. (see screenshots below)

    Name:  UAC_Always_notify_me_when.jpg
Views: 400270
Size:  56.3 KB
    Name:  UAC_Default.jpg
Views: 394070
Size:  55.3 KB
    Name:  UAC_Notify_me_only_when_apps_make_changes.jpg
Views: 395078
Size:  58.2 KB
    Name:  UAC_Never_notify_me_when.jpg
Views: 393614
Size:  51.6 KB

    5. If prompted by UAC, click/tap on Yes.

    6. When finished, you can close User Accounts if you like. (see screenshot below step 2)






    Change User Account Control (UAC) Settings in Windows 10 OPTION TWO Change User Account Control (UAC) Settings in Windows 10
    Change User Account Control Settings using a REG file

    1. Do step 2, step 3, step 4, or step 5 below for how you want to be notified by UAC.


    2. For "Always notify me"

    A) Click/tap on the Download button below to download the .reg file below, and go to step 6 below.

    UAC_Always_Notify.reg

    download

    3. For "Notify me only when apps try to make changes to my computer (default)"

    A) Click/tap on the Download button below to download the .reg file below, and go to step 6 below.

    UAC_Default.reg

    download

    4. For "Notify me only when apps try to make changes to my computer (don't dim my desktop)"

    A) Click/tap on the Download button below to download the .reg file below, and go to step 6 below.

    UAC_Do-Not-Dim.reg

    download

    5. For "Never notify me"

    A) Click/tap on the Download button below to download the .reg file below, and go to step 6 below.

    UAC_Never_Notify.reg

    download

    6. Save the .reg file to your desktop.

    7. Double click/tap on the downloaded .reg file to merge it.

    8. If prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    9. When finished, you can delete the downloaded .reg file if you like.


    That's it,
    Shawn



  1. Posts : 23,602
    64-bit Windows 10 Pro build 16362
       22 Apr 2016 #1

    UPDATE:

    When you are prompted to enter your credentials or elevate a program starting with Windows 10 Insider Preview Build 14328, you will notice the dialog now has a fresh and modern UI to align with the design language in use across Windows 10. And now when prompted to enter credentials, you can choose to sign-in with Windows Hello, a PIN, certificates or a simple password.

    Click image for larger version. 

Name:	new_cred-ui-901x1024.png 
Views:	2476 
Size:	385.3 KB 
ID:	76127

    Name:  new-UAC.png
Views: 232952
Size:  19.8 KB
      My ComputersSystem Spec


  2. Posts : 23,602
    64-bit Windows 10 Pro build 16362
    Thread Starter
       11 May 2016 #2

    Starting with Windows 10 Insider Preview Build 14342, the UAC dialog now supports dark mode! As part of this work, Microsoft has also updated the header color from yellow to blue.
      My ComputersSystem Spec


  3. Posts : 16,491
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       01 Oct 2016 #3

    A screenshot of a graphic from one of the videos from Ignite 2016: Halt hackers: do those tricks still work with Windows 10?
    Starting at 14:45 it will show how easy it is to circumvent.
    Click image for larger version. 

Name:	Image 002.png 
Views:	1050 
Size:	466.2 KB 
ID:	103896
      My ComputersSystem Spec


  4. Posts : 1,830
    Windows 10 Home x64 (Laptop), Windows 10 Pro x64 (Desktop)
       16 Dec 2016 #4

    Please see my weird problem at https://www.tenforums.com/general-su...pt-appear.html

    What process causes the screen to dim when the UAC prompt is invoked since this seems to be the source of my problem?
      My ComputerSystem Spec


  5. Posts : 16,491
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       16 Dec 2016 #5

    Steve C said: View Post
    Please see my weird problem at https://www.tenforums.com/general-su...pt-appear.html

    What process causes the screen to dim when the UAC prompt is invoked since this seems to be the source of my problem?
    Maybe it has to do with the anti malware scan portion of the request?
    In Windows 10, User Account Control has added some improvements.
    Integration with the Antimalware Scan Interface (AMSI). The AMSI scans all UAC elevation requests for malware. If malware is detected, the admin privilege is blocked.
    The Antimalware Scan Interface (AMSI) is a generic interface standard that allows applications and services to integrate with any antimalware product present on a machine. It provides enhanced malware protection for users and their data, applications, and workloads.
    AMSI is antimalware vendor agnostic, designed to allow for the most common malware scanning and protection techniques provided by today's antimalware products that can be integrated into applications. It supports a calling structure allowing for file and memory or stream scanning, content source URL/IP reputation checks, and other techniques.
    What's new in Windows 10, versions 1507 and 1511 (Windows 10)
      My ComputersSystem Spec


  6. Posts : 1,830
    Windows 10 Home x64 (Laptop), Windows 10 Pro x64 (Desktop)
       16 Dec 2016 #6

    It could be an antivirus compatibility issue. Turning the UAC control down one notch only seems to prevent the screen dimming - is that right? If so, I'll leave it on that setting to workaround the issue since I know what I'm doing (hopefully).
      My ComputerSystem Spec


  7. Posts : 16,491
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       16 Dec 2016 #7

    The gray out is secure desktop mode, a good(but older) explanation: User Account Control Prompts on the Secure Desktop UACBlog
      My ComputersSystem Spec


 

Related Threads
User Accounts Change Password of Account in Windows 10 in Tutorials
How to Change Password of Local Account or Microsoft Account in Windows 10 If you have a local account on the PC, then your Windows password is what you use to sign in to your user account in Windows on the PC. If you have a Microsoft...
User Accounts Add User Account in Windows 10 in Tutorials
How to Add a New User Account in Windows 10 You need a user account to use Windows, and if you share a single PC with other people, each person should have their own account. Each person can customize their account with their own settings and...
Read more: Microsoft to replace the traditional Control Panel with the Windows 10 Settings app | Windows Central
User Account Control in General Support
I used to run W7 with a hdd supplemented by a Sandisk 32gb Readycache. It ran automatically on bootup, there was a desktop icon to check up on it. W7 is now running from an ssd and the Sandisk is now with the old 80gb hdd for W10. Every time that...
How to turn off User Account Control in AntiVirus, Firewalls and System Security
I am finding it very hard to find all the settings. the PC Settings tab has very little on it. I would love to have my Control Panel back, but the first thing I want is to turn off the useless User Account Control. It does nothing but waste time...

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 04:28.
Find Us