Windows 10: Enable or Disable UAC prompt for Built-in Administrator in Windows

How to: Enable or Disable UAC prompt for Built-in Administrator in Windows

How to Enable or Disable User Account Control (UAC) prompt for Built-in Administrator in Windows


When administrator account before starting a program or task that requires a full administrator access token. This prompt ensures that no malicious software can be silently installed or run.

With the Always notify or Default secure desktop when you get an elevation request by the User Account Control (UAC) prompt.

A user that is a member of the Administrators group can log on, browse the Web, and read e-mail while using a standard user access token. When the administrator needs to perform a task that requires the administrator access token, Windows 10 automatically prompts the user for Y/N approval. This prompt is called an elevation prompt for UAC consent prompt.

The user experience for standard users is different from that of administrators in Admin Approval Mode. The recommended and more secure method of running Windows 10 is to make your primary user account a standard user account. Running as a standard user helps to maximize security for a managed environment. With the built-in UAC elevation component, standard users can easily perform an administrative task by entering valid credentials for a local administrator account. The default, built-in UAC elevation component for standard users is the UAC credential prompt.

See also: How User Account Control works (Windows 10) | Microsoft Docs

The built-in Administrator account does not get the UAC consent prompt since it runs with full administrative privilege (elevated rights) by default.

The built-in Administrator account will be prompted by UAC just like any other administrator account.

This tutorial will show you how to enable or disable User Account Control (UAC) for the built-in Administrator account in Windows 7, Windows 8, or Windows 10.

*Warning You must be signed in as an administrator to enable or disable User Account Control (UAC) for the built-in Administrator account.


CONTENTS:

• Option One: Enable or Disable UAC prompt for Built-in Administrator account in Local Security Policy
• Option Two: Enable or Disable UAC prompt for Built-in Administrator account using a REG file

EXAMPLE: User Account Control (UAC) consent prompt









OPTION ONE [/i] Enable or Disable UAC prompt for Built-in Administrator account in Local Security Policy

*note The Local Security Policy is only available in the Windows 7/8/10 Pro, Windows 7/8/10 Enterprise, and Windows 10 Education editions.

All editions can use Option Two below.
1. Open the Local Security Policy (secpol.msc).

2. Expand open Local Policies and Security Options in the left pane of Local Security Policy, and double click/tap on the User Account Control: Admin Approval Mode for the Built-in Administrator account policy to edit it. (see screenshot below)



3. Do step 4 (enable) or step 5 (disable) below for what you would like to do.


4. To Enable UAC prompt for Built-in Administrator account
A) Select (dot) Enabled, click/tap on OK, and go to step 6 below. (see screenshot below)

5. To Disable UAC prompt for Built-in Administrator account
*note This is the default setting.
A) Select (dot) Disabled, click/tap on OK, and go to step 6 below. (see screenshot below)




6. When finished, close the Local Security Policy window if you like.





OPTION TWO [/i] Enable or Disable UAC prompt for Built-in Administrator account using a REG file

*note The downloadable .reg files below will modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

ValidateAdminCodeSignatures DWORD

0 = Disable
1 = Enable


1. Do step 2 (enable) or step 3 (disable) below for what you would like to do.


2. To Enable UAC prompt for Built-in Administrator account
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_UAC_prompt_for_Built-in_Administrator_account.reg

Download

3. To Disable UAC prompt for Built-in Administrator account
*note This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_UAC_prompt_for_Built-in_Administrator_account.reg

Download
4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. You can now delete the downloaded .reg file if you like.

That's it,
Shawn


Related Tutorials

• How to Enable or Disable Built-in Elevated Administrator Account in Windows 10
• How to Enable or Disable User Account Control (UAC) in Windows
• How to Change User Account Control (UAC) Settings in Windows 10
• How to Change User Account Control (UAC) prompt Behavior for Administrators in Windows
• How to Change User Account Control (UAC) prompt Behavior for Standard Users in Windows
• How to Hide or Show Administrators in UAC prompt for Standard Users in Windows
• How to Enable or Disable Dimmed Secure Desktop for UAC prompt in Windows
• How to Enable or Disable Ctrl+Alt+Delete Secure Desktop for UAC prompt in Windows

:)

 

Changing the UAC Setting Prompt for Built-In Admin account?

Just wondering if I need to set the following UAC Prompt for the Built-In Administrator account even when its disabled by default? I created my own Admin account during Windows 10 installation, but by default, the Built-In Admin account is disabled. So do I need to set the following from the below tutorial to ENABLE even if the Built-In Admin account is disabled?

Enable or Disable UAC prompt for Built-in Administrator in Windows

 

Can't keep UAC disabled (never notify)

It's easy to do Enable or Disable UAC prompt for Built-in Administrator in Windows | Windows 10 Tutorials (Admin Approval Mode for the Built-in Administrator account = Enabled). It works for a few reboots. Then it's magically back to Disabled (and action center says "You must restart your computer to turn on User Account Control".

What's the next step to force this thing to stay at "never notify"? (And yes, I have strong anti-virus protection and everything, I'm willing to take the risk this setting brings.)

 

Changing the UAC Setting Prompt for Built-In Admin account?

Hello win10freak, *Smile

The group policy in that tutorial will only affect the built-in "Administrator" account, and no other account.

By default, the built-in Administrator doesn't get prompted by UAC for elevation since the account runs with elevated rights by default.

You really would only want to use that group policy if you wanted the built-in Administrator to be prompted by UAC for elevation instead.

It doesn't matter if the built-in Administrator is current disabled or not. The group policy would affect it whenever you enable/disable the account.

 

Windows 10 Built in apps + UAC

Hello,



Thank you for posting your query on Microsoft community. We understand your requirement in this regard.

Please share these details.

• 
  On which Microsoft account you are trying to disable these apps?
  
• 
  When you say "we have an application in our company, which requires UAC to be disabled for it to work”. Which application you are referring to?
  
• 
  On how many computers you are facing this issue?
  
• 
  Are the systems connected to a domain network?
  
• 
  Is the issue specific to this application?
  

You can see this error message “is app can't open with built in administrator account”, when you try to open built-in apps in built-in administrator. So you need a Microsoft account in order to make use of those built-in apps.



Moreover, I see you already disabled the UAC as per the application requirement that you use as a part of your company. We don’t recommend disabling UAC on to help make your computer secure. However currently we don’t have any option to run those
app with built-in administrator.



I suggest that you provide your suggestions and feedbacks in the dedicated Feedback App. Follow these steps to provide suggestions in Windows Feedback App.

At any time, select Start, and then type Windows Feedback to send us your opinions and suggestions. Windows Feedback is only available if you have Diagnostic and usage data set to Full (Full is the recommended setting).

To change the Diagnostic and usage data setting, go to Start , then select Settings > Privacy > Feedback & diagnostics, and then, under Diagnostic and usage data, select an option.



Thank you.

 

Windows 10 Built in apps + UAC

Hi,

Though I have seen suggestion from many forums to enable UAC to fix "this app can't open with built in administrator account", I just wanted to check if there is any other way we can fix this. Because, we have an application in our company, which requires
UAC to be disabled for it to work. All users are administrators in their own machine.