Home » software » Configuring UAC in Windows Operating System

Configuring UAC in Windows Operating System

To Turn UAC control ON or OFF

  1. Open ‘Control panel’. Click on ‘User Accounts’. In the ‘User Account’ window, click on ‘Change User Account Control Settings’.
  2. To turn off the UAC, move the slider to the ‘Never notify’ position and then click ‘Ok’. If you are prompted for an administrator password or confirmation, type the password or provide confirmation. You will need to restart your computer for UAC to be turned off.
  3. To turn on UAC, move the slider to choose when you want to be notified and then click ‘Ok.’ If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Turn the guest account ON or OFF

If you want to provide temporary access to someone who will be using your computer for a while, you can turn ON the guest account. The guest account allows a user to log on to a network, browse the internet and shutdown the computer. The guest account should be turned OFF when not in use.

  1. Open ‘Control panel’. Click on ‘User Accounts’. In the ‘User Account’ window, click on ‘Manage another account’.All the users’ account that is created on the computer system will be displayed here.
  2. Click on ‘Guest’ account.
  3. Click the ‘Turn On’ button to enable the ‘Guest’ account.

Changing the UAC settings

To make changes in the UAC settings you must be logged on as an administrator.

  1. Click ‘Start’ and then ‘Control Panel’.
  2. Select ‘User Accounts’. In the ‘User Accounts’ task window, click ‘Turn User Account Control ON or OFF’.
  3. If the ‘User Account Control’ dialog box appears, confirm that the action it displays is what you want, and then click ‘Yes’.
  4. In the ‘Security’ section of the ‘Windows Solution Center’ page, click ‘Adjust UAC settings’.
  5. On the ‘User Account Control Settings’ page, move the slider to ‘Never Notify’ to disable UAC.
  6. To enable UAC or change the level, move the slider to the appropriate option. Click ‘Ok’.

UAC detects most of the setup applications automatically and then treats them as applications that require elevation of the user’s security context, even if the application is not explicitly marked as a setup application. In a managed environment, where users are not expected to run installation or setup programs, this can create unwanted request for support when users receive a UAC prompt.

Changing the behavior of UAC by applying Group policy

  1. Press ‘Windows + R’. Type ‘gpedit.msc’.
  2. Under ‘Computer configuration’. Select ‘Security settings’.
  3. Go to ‘Local policies’. Select ‘Security options’.
  4. In the details pane, scroll down and double click the group policy setting that you want to change.

UAC policy settings that a local administrator can modify

  1. User Account Control: Admin Approval Mode for the built-in Administrative account.
  2. User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop.
  3. User Account Control: Behaviour of the elevation prompts for administrators in Admin Approval mode.
  4. User Account Control: Behavior of the elevation prompts for standard users.
  5. User Account Control: Detect application installations and prompt for elevation.
  6. User Account Control: Only elevate executables that are signed and validated.
  7. User Account Control: Only elevate UIAccess applications that are installed in secure locations.
  8. User Account Control: Run all administrators in Admin Approval Mode.
  9. User Account Control: Switch to the secure desktop when prompting for elevation.
  10. User Account Control: Virtualize file and registry write failures to per-user locations.
  11. On the ‘Properties’ page, make your selection, and then click ‘Ok’.