Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions

When Windows Vista was first announced, the User Account Control (UAC) feature almost immediately received quite a bit of backlash from the user community.

According to security experts, this is a pretty good security solution, but most users still choose to turn off UAC and accidentally "reveal" existing vulnerabilities in the system.

This feature has been improved quite a bit in subsequent versions of Windows and although it makes the operating system much more secure, some users still want to disable UAC.

In the following article, Quantrimang.com will go into the specific details of what UAC is, how UAC works, and the benefits of enabling this feature in any version of Windows.

What is User Account Control (UAC)?

What is User Account Control (UAC)?

UAC, short for User Account Control, is a Windows security feature that helps prevent unauthorized changes to the operating system. These changes can be initiated by applications, users, viruses, or other forms of malware.

User Account Control ensures that certain changes can only be made with administrator approval. If changes are not approved by the administrator, they will not be implemented and Windows will remain unchanged, as if nothing happened. UAC was first introduced with Windows Vista and has been improved with each new version of Windows since then.

What does a User Account Control (UAC) prompt look like? What does it share and ask for?

When you double-click a file, setting, or app that's about to make important changes to Windows, you'll see a User Account Control (UAC) prompt. If your user account is an administrator, the prompt will look like the screenshot below. Here you can see the UAC prompt in Windows 10 (top), Windows 7 (middle), and Windows 8.1 (bottom).

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
UAC prompts in Windows versions

The UAC prompt displays the name of the program that is about to make a system change that requires the approval of the administrator, the publisher of that program, and the origin of the file (if you are trying to run the file). All it needs from the administrator is to click or tap Yes , to allow the program or file to make the changes it wants.

If your user account is not admin, the prompt will be different. For example, in Windows 10, the UAC prompt asks for a PIN (if one has been set) or an admin password.

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
UAC prompt asking for admin PIN or password

In Windows 7 and Windows 8.1, the UAC prompt always asks for the admin password, as shown below.

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
In Windows 7 and Windows 8.1, the UAC prompt always asks for the admin password

When this happens, you need to enter your admin PIN or password and click Yes. Unless both actions are performed, the requested changes will not be made.

The UAC prompt also has a link that says " Show more details " (in Windows 10) or " Show details " (in Windows 7 and Windows 8.1). If you click it, you'll see more information including the exact location on your drive of the program or file and the publisher's certificate, which tells you more about who created what you want to run.

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
The UAC prompt also has a link that says "Show more details" (in Windows 10) or "Show details" (in Windows 7 and Windows 8.1)

How do I know that a file or setting will trigger a UAC prompt?

Files that trigger a UAC prompt when run have a UAC icon in the lower right corner of their file icon, similar to the screenshot below.

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
UAC Icon

Applications and system settings that trigger UAC prompts also have the UAC icon near their name or in their icon. You can see some examples highlighted below, found in Control Panel .

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
Applications and system settings that trigger UAC prompts also have a UAC icon near their name or in their icon.

Remember the UAC icon and every time you see it, you will know in advance that you are about to need admin approval.

How does User Account Control (UAC) work?

In Windows, applications run without any administrative rights by default. They have the same rights that standard user accounts have: They cannot make any changes to the operating system, system files, or registry settings. Additionally, they cannot change anything owned by other user accounts. Applications can only change their own files and registry settings or the user's files and registry settings.

When an application wants to make changes to the system, such as: Changes that affect other user accounts, modify Windows system files and folders, install new software, a UAC prompt is displayed, asking for permission. If the user clicks No , the changes will not be made. If the user clicks Yes (and enters the administrator password, if prompted), the application will receive administrative rights and it can make changes to the system as it wishes. These rights are only given until the application stops running or is closed by the user. The same goes for files that trigger a UAC prompt.

For better understanding, the UAC algorithm is explained in the diagram below.

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
The UAC algorithm is explained in the diagram above.

What changes require Administrator rights?

Basically, there are quite a few changes that require Administrator rights to perform, on the other hand they also depend on how UAC is adjusted. Specifically, the changes we are talking about include:

  • Activate a program
  • Change system settings, or files in the Windows & Program Files folder
  • Install, remove drivers or software
  • Delete or add user accounts
  • View or change other users' folders and files
  • Windows Update Configuration
  • Change settings to Windows Firewall
  • Change UAC settings
  • Change user account type
  • Run Task Scheduler
  • Restore backed up system files
  • Change system date and time
  • Configure Parental Controls or Family Safety
  • Install ActiveX controls (in Internet Explorer)

Should I disable UAC when installing a program and enable it again afterwards?

The biggest annoyance for users is when they install Windows and their most used desktop applications. During this process, a lot of UAC prompts are displayed and you can temporarily disable it, while installing all the applications and re-enable it when finished.

In some situations, this can be a bad idea. Desktop applications that make a lot of system changes may not work if UAC is enabled after you install them. However, they will work properly if you install them with UAC enabled.

When UAC is turned off, the virtualization techniques used by UAC for all applications are not active. This causes certain user settings and files to be installed in a different location. They will not work when UAC is turned back on. To avoid such problems, it is better to keep User Account Control (UAC) enabled at all times.

How to configure UAC settings

To configure UAC settings, open the Start menu, type user account control , and click to open User Account Control settings . Alternatively, you can access UAC through Control Panel > User Accounts > User Account > Change User Account Control Settings .

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions

The default User Account Control setting is set to Notify me only when apps try to make changes to the computer (default) . The default setting is recommended for most users who install apps from trusted sources and visit familiar websites.

Learn about the nature of UAC in Windows and how to use this setting to control Windows user permissions
Windows 11 user account settings dialog

However, you can change the settings using the slider on the left. Here are the four UAC options you can choose from:

  1. Always notify me when : This is the most strict option. Windows will display a UAC prompt with a dimmed desktop environment when you try to install an application on your computer. However, you will also see a UAC prompt when you change Windows system settings to ensure that applications cannot make changes without the user's consent.
  2. Notify me when apps try to make changes to my computer : This is the default option. Windows will ask you for permission when you install an app or try to run an app with admin rights. However, changing most system settings will not trigger a UAC prompt.
  3. Notify me only when apps try to make changes to my computer (do not dim my desktop) : Use this option to safely disable dimmed desktops for UAC prompts. The dimmed desktop environment is a security feature that prevents other applications from interfering with the visual appearance of the UAC dialog. Use this option only if it takes a long time to dim the desktop.
  4. Never notify me : This option turns off UAC and should only be used when troubleshooting problems with an application or your computer. When set to off, Windows will not notify you when you try to install an application or make changes with administrative privileges. However, turning off UAC can make your computer vulnerable to unauthorized changes, so it is important to use this option with caution.

While UAC adds security to your system, there are additional steps you can take to protect your computer. Use a strong PIN or password to prevent unauthorized access, only install apps from trusted sources, preferably the Windows Store and the developer's official website, and make sure your system has the latest Windows security updates as they become available.

Sign up and earn $1000 a day ⋙

Leave a Comment

Recover Deleted Data with Recuva Portable in Windows 7

Recover Deleted Data with Recuva Portable in Windows 7

In the following article, we will present the basic operations to recover deleted data in Windows 7 with the support tool Recuva Portable. With Recuva Portable, you can store it in any convenient USB, and use it whenever needed. The tool is compact, simple, easy to use with some of the following features:

How to delete duplicate files to save computer memory using CCleaner

How to delete duplicate files to save computer memory using CCleaner

CCleaner scans for duplicate files in just a few minutes, then lets you decide which ones are safe to delete.

10 Windows Settings You Should Never Leave as Default

10 Windows Settings You Should Never Leave as Default

Windows doesn't come with security set up by default, which means there are some default settings you need to change.

How to Download, Update, and Troubleshoot USB Drivers on Windows 10

How to Download, Update, and Troubleshoot USB Drivers on Windows 10

USB devices have become indispensable in everyday life, allowing us to connect a wide variety of essential hardware to our PCs.

How to Lock Guest Wi-Fi Network So No One Can Spy

How to Lock Guest Wi-Fi Network So No One Can Spy

If you properly lock down your guest Wi-Fi network, you can share your Internet connection with any visitors without sharing any other information.

Lost Admin rights on Windows 10, heres how to fix it

Lost Admin rights on Windows 10, heres how to fix it

For some reason, your Windows 10 computer lost Admin rights, every time you open an application on the screen you receive an error message. So how to restore lost Admin rights, please refer to the article below of WebTech360.

3 ways to turn off Windows 11 firewall

3 ways to turn off Windows 11 firewall

In this article, WebTech360 will guide you how to turn off the firewall on Windows 11.

Windows 11 22H2: Moment 1 update with many notable features

Windows 11 22H2: Moment 1 update with many notable features

After a long wait, the first major update of Windows 11 has officially been released.

How to fix Unhandled Exception Has Occurred error on Windows 10

How to fix Unhandled Exception Has Occurred error on Windows 10

The Unhandled exception has occurred error is not related to a specific application, making it more difficult to resolve. This article will guide you through some ways to fix the Unhandled exception has occurred error on Windows 10.

9 Ways to Convert MOV Files to MP4

9 Ways to Convert MOV Files to MP4

These days, most PCs and Apple devices can handle both MOV and MP4 files, at least to some extent. However, the need to convert MOV video files to MP4 files has not diminished.

What is end-to-end encryption? How does it work?

What is end-to-end encryption? How does it work?

Recognizing this need, major online messaging services use a technique called end-to-end encryption, to secure and protect users' conversations.

How to set different wallpapers on each monitor Windows 10/11

How to set different wallpapers on each monitor Windows 10/11

Setting up multiple monitors on Windows is quite simple and only takes a few minutes to do. After setting up multi-monitor mode (multiple screens), you can set up separate wallpapers for each screen. To do this, please refer to the article below from WebTech360.

How to use Command Prompt, how to use cmd on Windows

How to use Command Prompt, how to use cmd on Windows

Hidden deep within Windows is a world of command lines that few people know about. In this article, we will guide you on how to fix errors and make your computer more secure using the cmd command line tool.

How to enter BIOS (UEFI) on Windows 10, how to fix the error of not being able to enter BIOS Win 10

How to enter BIOS (UEFI) on Windows 10, how to fix the error of not being able to enter BIOS Win 10

Instructions on how to enter BIOS on Windows 10 for you, with video illustration.

How to use hidden video editor on Windows 11

How to use hidden video editor on Windows 11

Clipchamp is the default video editor on Windows 11, but if you just need to make a quick cut, split a simple photo, or add music to a clip, the classic editor inside the Photos Legacy app is a much better choice.