Changing the UAC Setting Prompt for Built-In Admin account? Solved

  1.    #1

    Changing the UAC Setting Prompt for Built-In Admin account?


    Just wondering if I need to set the following UAC Prompt for the Built-In Administrator account even when its disabled by default? I created my own Admin account during Windows 10 installation, but by default, the Built-In Admin account is disabled. So do I need to set the following from the below tutorial to ENABLE even if the Built-In Admin account is disabled?

    Enable or Disable UAC prompt for Built-in Administrator in Windows
      My ComputerSystem Spec

  2. Brink's Avatar
    Posts : 38,831
    64-bit Windows 10 Pro build 18898
       #2

    Hello win10freak,

    The group policy in that tutorial will only affect the built-in "Administrator" account, and no other account.

    By default, the built-in Administrator doesn't get prompted by UAC for elevation since the account runs with elevated rights by default.

    You really would only want to use that group policy if you wanted the built-in Administrator to be prompted by UAC for elevation instead.

    It doesn't matter if the built-in Administrator is current disabled or not. The group policy would affect it whenever you enable/disable the account.
      My ComputersSystem Spec

  3.    #3

    So, I looked into that specific UAC Group Policy setting and currently is set to Not Defined.
    Even if I will not enable the built-in Admin account, should I still set a Group Policy to Enable?
      My ComputerSystem Spec

  4. Brink's Avatar
    Posts : 38,831
    64-bit Windows 10 Pro build 18898
       #4

    "Not Defined" just means the group policy is "Not configured", and currently at its default of not prompting the built-in Administrator with UAC for elevation.

    It really depends on what you want or not for the UAC prompt for the built-in Administrator.

    I'd say, there's no need to set this unless you want to have the built-in Administrator prompted by UAC.
      My ComputersSystem Spec

  5.    #5

    If I don't have the need to use the built-in Admin account and just leave it disabled, should I leave it as Not Defined?
      My ComputerSystem Spec

  6. Brink's Avatar
    Posts : 38,831
    64-bit Windows 10 Pro build 18898
       #6

    I would.

    You don't want to configure group policy settings unless you have a need to do so.
      My ComputersSystem Spec

  7.    #7

    Thanks! Appreciate the support and detailed explanation.

    However, slightly off topic here, but what about setup programs that a user can just change to their User Profile instead of a System folder like the Program Files folder? If a Standard User installs an app like Utorrent for example without changing the installation destination (C:\Program Files), then of course, the UAC will prompt for the Admin credentials. But when the user changes the installation path to their User Folder or wherever a directory does not need Admin rights to install, then its bad news...

    So I guess there is a slight flaw in this UAC prompt thing when it comes to applications like these.

    Best UAC setting if one likes to be more secure, then UAC setting for Standard Users should be: Automatically deny elevation requests.

    Change UAC prompt Behavior for Standard Users in Windows


    Utorrent is one example, see the image.
    Attached Thumbnails Attached Thumbnails Capture.PNG  
      My ComputerSystem Spec

  8. Brink's Avatar
    Posts : 38,831
    64-bit Windows 10 Pro build 18898
       #8

    A user will be able to specify any path they have access rights (aka: permissions) to.

    Disabling UAC for standard users wouldn't help for that.
      My ComputersSystem Spec

  9.    #9

    Just realized, that this more restrictive setting does not allow me to update Adobe updates/patches and may not even update Windows unless I sign out from my Standard User Account and logon to my Admin account which is not convenient. So, I had it changed back to just Prompt for Consent on the Secure Desktop.
      My ComputerSystem Spec


 

Related Threads
I have two accounts - Administrator & Standard. When I login to the standard account and tried accessing the admin folders (C:\Users\Admin...), it asked me for my admin password initially. However, after entering the correct password, I was able to...
So I went to cmd and I want to know if I have the built in admin account. Im logged in as a standard user, second account. and in cmd I typed NET USER USER which probably shows the administrator account. But in the comment section it doesnt say...
Hello, My office updated to Win 10 about three months ago. One of my co-workers has discovered that she can't boot Edge. I've tried these potential fixes, but still no go. Fix #1: 1. >Win/R & type “secpol.msc” (no quotes); browse to: ...
built-in admin account problem in AntiVirus, Firewalls and System Security
i have a clean install of windows 10 pro, before i had a windows 7 and was using the built-in administrator account without problems. now in windows 10 i'm using the built in administrator account but facing problems 1) if i leave the "security...
Domain admin account as built-in admin account in User Accounts and Family Safety
I just upgraded two brand new pc's from Win 7 to Win 10. Computers were already added to the domain in Win 7 and I was logged into the domain administrator account when I did the upgrade to Win 10. Now when I am logged in with the domain...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:58.
Find Us