Windows 10: How to make UAC always default to using Windows Hello Face instead of password

I'm using Windows 11 Pro 64-bit 21H2 on a Surface Pro 7 i7. I used to sign in with a Microsoft account, and decided after some time to switch to Local accounts on all my devices. On my Surface, after switching to a Local account, I had issues where my Microsoft account was still listed in UAC and I could not use my Windows Hello biometrics fingerprint and face recog. to elevate. It would say the password was incorrect. For context, I have my local security policy set to always require credentials in UAC, even as an admin. I switched back to a Microsoft account temporarily and then back to

:)

 

Any way to enable an admin password for UAC in windows 10?

Hi,

Thank you for posting your query on Microsoft community.

I suggest you to follow the steps below and check if this helps:

• Open User Account Control Settings by clicking the Start button.
• Then type uac, and then click Change User Account Control settings.
  
• 
  Do one of the following:
  

• To turn off UAC, move the slider to the Never notify position, and then click
  OK. If you're prompted for an administrator password or confirmation, type the password or provide confirmation. You will need to restart your computer for UAC to be turned off.
• To turn on UAC, move the slider to choose when you want to be notified, and then click
  OK. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

 

Windows 10 Hello + UAC

Answering your question No.....Hello is just a biometric means of signing in, an extra safeguard layer to gain access, you will also have to have a pin number for dual authentication.
You could if you wish pass on your suggestion in feedback hub.

 

How would windows hello and UAC work?

I want to create two accounts one admin which I will rarely use and one for everyday usage, both will use the same face in windows hello that got me thinking what if I'm on standard user I get prompted for a password to make changes.. it recognizes my face and bypasses the UAC everytime, I really don't want to type the pin I want to use windows hello? this could be fixed by having to type the username in the UAC but in GPO I find no such option.