Modifying Windows User Account Control (UAC) Win Vista & Win 7

Posted on | April 27, 2011 | No Comments

What is User Account Control?

User Account Control (UAC) is a new security component in Windows Vista and Windows 7. UAC enables users to perform common tasks as non-administrators, called standard users and as administrators without having to switch users, log off, or use Run As.

A standard user account is synonymous with a user account in Windows XP. User accounts that are members of the local Administrators group will run most applications as a standard user. That is what causes the popup boxes to appear every time you want to run an application.  To deactivate this function find the solution for your particular operating system and needs.

Windows Vista

To turn off UAC
Use the following procedure to disable UAC.

To perform the following procedure correctly, you must be able to log on with or provide the credentials of a member of the local Administrators group.

Important
Turning off UAC reduces the security of your computer and may expose you to increased risk from malicious software. Microsoft does not recommend leaving UAC disabled.

 

To turn off UAC

  1. Click Start, and then click Control Panel.
  2. In Control Panel, click User Accounts.
  3. In the User Accounts window, click User Accounts.
  4. In the User Accounts tasks window, click Turn User Account Control on or off.
  5. If UAC is currently configured in Admin Approval Mode, the User Account Control message appears. Click Continue.
  6. Clear the Use User Account Control (UAC) to help protect your computer check box, and then click OK.
  7. Click Restart Now to apply the change right away, or click Restart Later and close the User Accounts tasks window.

Disable Admin Approval Mode

Use the following procedure to disable Admin Approval Mode.

To perform the following procedure correctly, you must be logged into a client computer as a local administrator.

Important
You cannot disable Admin Approval Mode on Windows Vista Starter, Windows Vista Home Basic, or Windows Vista Home Premium because secpol.msc is not included.

 

To disable Admin Approval Mode

  1. Click Start, click All Programs, click Accessories, click Run, type secpol.msc in the Open box, and then click OK.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. From the Local Security Settings console tree, double-click Local Policies, and then double-click Security Options.
  4. Scroll down and double-click User Account Control: Run all administrators in Admin Approval Mode.
  5. Select the Disabled option, and then click OK.
  6. Close the Local Security Settings window and Restart.

Change the elevation prompt behavior

Use the following procedures to change the elevation prompt behavior for UAC. You can configure the behavior of the elevation prompt separately for administrators and for standard users.

To perform the following procedures correctly, you must be logged on to a client computer as a local administrator.

Important
To complete the following procedures, you must be running Windows Vista Ultimate, Windows Vista Enterprise, or Windows Vista Business. You cannot complete the following procedures if you are running Windows Vista Starter, Windows Vista Home Basic, or Windows Vista Home Premium because secpol.msc is not included.

 

To change the elevations prompt behavior for Administrators

  1. Click Start, click Accessories, click Run, type secpol.msc in the Open box, and then click OK.
  2. From the Local Security Settings console tree, click Local Policies, and then Security Options.
  3. Scroll down to and double-click User Account Control: Behavior of the elevation prompt for administrators.
  4. From the drop-down menu, select one of the following settings:
    • Elevate without prompting (tasks requesting elevation will automatically run as elevated without prompting the administrator)
    • Prompt for credentials (this setting requires user name and password input before an application or task will run as elevated)
    • Prompt for consent (default setting for administrators)
  5. Click OK.
  6. Prompt for consent (default setting for administrators)
  7. Close the Local Security Settings window and Restart.

To change the elevations prompt behavior for standard users

  1. Click Start, click Accessories, click Run, type secpol.msc in the Open box, and then click OK.
  2. From the Local Security Settings console tree, click Local Policies, and then Security Options.
  3. Scroll down to and double-click User Account Control: Behavior of the elevation prompt for standard users.
  4. From the drop-down menu, select one of the following settings:
    • Automatically deny elevation requests (standard users will not be able to run programs requiring elevation, and will not be prompted)
    • Prompt for credentials (this setting requires user name and password input before an application or task will run as elevated, and is the default for standard users)
  5. Click OK.
  6. Close the Local Security Settings window and Restart.


Windows 7

Option One: Through the Control Panel\

  1. Open the Start Menu.
  2. Click on the Control Panel button on the right.
  3. Click on the User Accounts icon.
  4. Click on the Change User Account Control settings link. (See screenshot below)
     
    Change User Account Control settings

    Change User Account Control settings

  5. If prompted by UAC, click on Yes to approve.
  6. Adjust the slider to the level of protection of how much you want to be notified from UAC.
  7. Click OK when done.
  8. Close the User Account Control Settings window and Restart.

Option Two: Through the Local Group Policy Editor

To perform the following procedures correctly, you must be logged on to a client computer as a local administrator.

To change the elevations prompt behavior for administrators

  1. Click Start, click Accessories, click Run, type secpol.msc in the Open box, and then click OK.
  2. From the Local Security Settings console tree, click Local Policies, and then Security Options.
  3. Scroll down to and double-click User Account Control: Behavior of the elevation prompt for administrators. (See screenshot below)

    UAC: Behavior of the elevation prompt for administrators

    UAC: Behavior of the elevation prompt for administrators

  4. From the drop-down menu, select one of the following settings:
    • Elevate without prompting (tasks requesting elevation will automatically run as elevated without prompting the administrator)
    • Prompt for credentials (this setting requires user name and password input before an application or task will run as elevated)
    • Prompt for consent (default setting for administrators)
  5. Click OK.
  6. Close the Local Security Settings window and Restart.

To change the elevations prompt behavior for standard users

  1. Click Start, click Accessories, click Run, type secpol.msc in the Open box, and then click OK.
  2. From the Local Security Settings console tree, click Local Policies, and then Security Options.
  3. Scroll down to and double-click User Account Control: Behavior of the elevation prompt for standard users. (See screenshot below)

    UAC: Behavior of the elevation prompt for standard users

    UAC: Behavior of the elevation prompt for standard users

  4. From the drop-down menu, select one of the following settings:
    • Automatically deny elevation requests (standard users will not be able to run programs requiring elevation, and will not be prompted)
    • Prompt for credentials (this setting requires user name and password input before an application or task will run as elevated, and is the default for standard users)
  5. Click OK.
  6. Close the Local Security Settings window and Restart.
If you enjoyed this post, make sure you subscribe to my RSS feed!

Comments

Leave a Reply

You must be logged in to post a comment.