Windows Security · UAC · Administrator Prompts

How to Configure or Disable User Account Control (UAC) in Windows 10 and Windows 11
Settings · Control Panel · Registry · Group Policy

A practical guide to changing UAC notification levels, reducing administrator prompts, disabling UAC for troubleshooting, and restoring the recommended Windows security settings afterward.

Windows 10 Windows 11 Administrator Rights Security Settings
Section 01

What Is User Account Control (UAC) in Windows?

User Account Control (UAC) is a Windows security feature that asks for confirmation when a program tries to make system-level changes. These changes may include installing software, editing protected system folders, changing security settings, modifying the Registry, installing drivers, or running tools with administrator privileges.

UAC is designed to prevent silent elevation. Even if your account is an administrator account, Windows usually runs normal programs with standard user permissions until an elevated action is approved. When elevation is required, Windows shows a UAC prompt such as Do you want to allow this app to make changes to your device?.

💡
Key Point UAC is not an antivirus replacement. It is a privilege-control layer that helps prevent unwanted programs from gaining administrator-level access without confirmation.

When UAC Usually Appears

🛡️

Protects System Areas

UAC helps block unapproved changes to protected Windows folders, system settings, drivers, and security components.

👤

Separates Normal and Elevated Work

Administrator accounts can still run everyday apps without full administrator rights until elevation is required.

⚠️

Warns Before High-Risk Changes

The prompt gives you a chance to stop an unknown installer, script, or tool before it changes the system.

Section 02

UAC Notification Levels in Windows 10 and Windows 11 Explained

Windows provides a slider in User Account Control Settings. The slider does not offer only a simple on/off switch. It controls how often Windows notifies you and whether the prompt appears on the secure desktop.

UAC Level What It Does Best Use Security Impact
Always notify Shows a prompt when apps try to make changes and when you change Windows settings. High-security PCs, shared computers, test systems, and malware cleanup scenarios. Highest
Notify only when apps try to make changes Shows prompts for app elevation but usually not for your own Windows setting changes. Recommended default setting for most home and office users. Recommended
Notify only when apps try to make changes, without dimming the desktop Shows prompts, but does not switch to the secure desktop. Systems where secure desktop prompts cause display, remote access, or accessibility issues. Reduced
Never notify Suppresses most UAC notifications for administrator accounts. Temporary troubleshooting only, not everyday use. Weakest
⚠️
Important Difference Moving the slider to Never notify reduces prompts, but fully disabling the UAC infrastructure is different. A full disable usually involves the EnableLUA Registry value or the equivalent security policy and requires a restart.
Section 04

How to Change UAC Settings from Control Panel

The easiest way to configure UAC is to open the built-in User Account Control Settings window. This method works in both Windows 10 and Windows 11.

Method 1: Open UAC Settings from Search

  1. Open the Start menu.
  2. Type User Account Control.
  3. Click Change User Account Control settings.
  4. Move the slider to the notification level you want.
  5. Click OK.
  6. Confirm the UAC prompt if Windows asks for permission.

Method 2: Open UAC Settings with the Run Dialog

This is the fastest method if you know the command name.

  1. Press Win + R.
  2. Type the following command and press Enter: 
    Run commandUserAccountControlSettings.exe
  3. Move the slider to the preferred level.
  4. Click OK and approve the change.

Method 3: Open UAC Settings from Control Panel

  1. Open Control Panel.
  2. Go to User Accounts.
  3. Click User Accounts again if needed.
  4. Select Change User Account Control settings.
  5. Choose the notification level and click OK.
Control Panel → User Accounts → Change User Account Control settings
Section 05

How to Disable UAC Prompts in Windows Using the Slider

To disable most UAC notifications from the graphical interface, move the slider to Never notify. This is the common method users mean when they say they want to turn off UAC prompts.

  1. Press Win + R.
  2. Type UserAccountControlSettings.exe and press Enter.
  3. Drag the slider down to Never notify.
  4. Click OK.
  5. Approve the final prompt.
  6. Restart the computer if a specific app or policy still behaves as if the old setting is active.
🚫
Security Warning Do not leave UAC on Never notify permanently unless you have a specific reason. Malicious software, unsafe installers, and scripts can make administrative changes more easily when prompts are suppressed.

How to Turn UAC Back On

  1. Open UserAccountControlSettings.exe again.
  2. Move the slider back to the default level: Notify me only when apps try to make changes to my computer.
  3. Click OK.
  4. Restart Windows if you previously changed Registry or policy settings.
Section 06

How to Disable or Restore UAC Using Registry Editor

Advanced users can configure UAC through the Registry. This is useful when the graphical slider is not enough, when you need to check exact values, or when you are repairing a system where UAC settings were changed by a tweak tool.

⚠️
Before Editing the Registry Create a restore point or export the Registry key before changing values. Incorrect security settings can weaken Windows protection or cause administrative tools to behave unexpectedly.

Registry Path for UAC Settings

Registry pathHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Registry Value Purpose Common Value
EnableLUA Controls whether UAC and Admin Approval Mode are enabled. 1 enabled, 0 disabled
ConsentPromptBehaviorAdmin Controls how administrator accounts are prompted for elevation. 5 is a common default; 0 elevates without prompting
PromptOnSecureDesktop Controls whether UAC prompts appear on the secure desktop. 1 secure desktop on, 0 off

Disable UAC Completely with Registry Editor

  1. Press Win + R, type regedit, and press Enter.
  2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
  3. Double-click EnableLUA.
  4. Set the value data to 0.
  5. Click OK.
  6. Restart Windows.
🧨
Full Disable Setting EnableLUA to 0 is stronger than simply choosing Never notify. Use it only for troubleshooting, controlled testing, or legacy compatibility work.

Restore Recommended UAC Registry Values

To restore typical UAC behavior, set EnableLUA back to 1. You can also restore administrator prompt behavior and the secure desktop setting. 

Recommended valuesEnableLUA = 1
ConsentPromptBehaviorAdmin = 5
PromptOnSecureDesktop = 1
Section 07

How to Configure UAC with Command Prompt or PowerShell

Command-line methods are useful for administrators, scripts, repair work, and remote support. Run these commands from an elevated terminal.

Check Current UAC Registry Values

Command Promptreg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v PromptOnSecureDesktop
PowerShellGet-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" |
Select-Object EnableLUA, ConsentPromptBehaviorAdmin, PromptOnSecureDesktop

Disable UAC Completely from Command Prompt

This command sets EnableLUA to 0. Restart Windows after running it. 

Elevated Command Promptreg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f

Restore Recommended UAC Settings from Command Prompt

Elevated Command Promptreg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 5 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v PromptOnSecureDesktop /t REG_DWORD /d 1 /f

Restart Windows After a Full UAC Change

Restart commandshutdown /r /t 0
🔎
Tip If you only changed ConsentPromptBehaviorAdmin or PromptOnSecureDesktop, a restart is often not as critical as when changing EnableLUA. For clean testing, restart anyway.
Section 08

How to Configure UAC with Local Security Policy or Group Policy

Windows Pro, Enterprise, and Education editions include policy tools that expose UAC settings in a more descriptive way. Windows Home usually does not include the full Local Security Policy or Group Policy editor.

Open Local Security Policy

  1. Press Win + R.
  2. Type secpol.msc and press Enter.
  3. Go to Local Policies → Security Options.
  4. Scroll to the policies that begin with User Account Control.
Local Security Policy → Local Policies → Security Options

Important UAC Policy Settings

Policy What It Controls Recommended State
User Account Control: Run all administrators in Admin Approval Mode Enables or disables the core UAC behavior for administrator accounts. Enabled
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Controls whether administrators see consent prompts, credential prompts, or no prompts. Prompt for consent for non-Windows binaries
User Account Control: Switch to the secure desktop when prompting for elevation Controls whether the desktop is dimmed and isolated during prompts. Enabled
User Account Control: Detect application installations and prompt for elevation Controls installer detection and elevation prompts. Enabled

Use Group Policy Editor

On managed or professional Windows editions, you can also open gpedit.msc and use the same security options path.

Computer Configuration → Windows Settings → Security Settings → Local Policies → Security Options
🏢
Managed Devices If the computer belongs to a company or school, UAC settings may be controlled by domain Group Policy, Microsoft Intune, or another management tool. Local changes may be reversed automatically.
Section 09

Fix UAC Settings That Are Greyed Out, Locked, or Not Working

If UAC settings are unavailable, reset after reboot, or do not match the slider position, check account permissions, policies, Registry values, and management status.

Check 01

Use an Administrator Account

Standard users can trigger UAC prompts but usually cannot change system-wide UAC policy without administrator credentials.

Account Type
Check 02

Look for Local Policy

Open secpol.msc or gpedit.msc and check whether UAC policies are explicitly configured.

Policy
Check 03

Inspect Registry Values

Confirm EnableLUA, ConsentPromptBehaviorAdmin, and PromptOnSecureDesktop under the UAC policy key.

Registry

Common Problems and Fixes

Problem Likely Cause What to Do
UAC slider is greyed out You are not using an administrator account, or policy controls the setting. Sign in as an administrator and check secpol.msc, gpedit.msc, or the Registry policy key.
UAC turns back on after restart Domain policy, MDM policy, security software, or system-hardening tool restores the setting. Check work or school account management, domain policy, and installed security management software.
Apps still ask for administrator permission The app requires elevation, the account is standard, or UAC was only reduced rather than fully disabled. Run the app as administrator only if trusted, or check the exact EnableLUA value.
Modern apps or Windows features behave strangely UAC was fully disabled using EnableLUA = 0. Restore EnableLUA = 1 and restart Windows.

Restore a Safe Baseline

If you are unsure what was changed, restore the recommended Registry values, restart Windows, and then adjust the slider from the graphical UAC settings window. 

Safe baselinereg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 5 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v PromptOnSecureDesktop /t REG_DWORD /d 1 /f
shutdown /r /t 0
Section 10

FAQ: Configuring and Disabling UAC in Windows 10 and Windows 11

Q Should I disable UAC in Windows? ▼
In most cases, no. UAC should remain enabled because it helps prevent unapproved administrator-level changes. Disable it only temporarily for troubleshooting, testing, or trusted legacy software that cannot work correctly with UAC enabled.
Q Is Never notify the same as fully disabling UAC? ▼
Not always. Never notify suppresses most prompts for administrator accounts. Full UAC disable usually means setting EnableLUA to 0 or disabling Run all administrators in Admin Approval Mode, then restarting Windows.
Q Does disabling UAC make me a full administrator all the time? ▼
It can reduce or remove the approval step for elevated actions, depending on the method used. That convenience also increases risk because programs can make administrative changes with fewer warnings.
Q Why does Windows still show prompts after I changed the UAC slider? ▼
You may be using a standard account, a policy may override the setting, the app may request explicit elevation, or the system may not have been restarted after a deeper Registry or policy change. Check EnableLUA and the UAC policies in secpol.msc.
Q Can I disable UAC for only one program? ▼
Windows does not provide a simple per-program UAC off switch. If a trusted app always needs administrator rights, you can run it as administrator, adjust its compatibility settings, or use a controlled scheduled task method. Avoid bypassing UAC for unknown or downloaded programs.
Q Do I need to restart after changing UAC? ▼
For simple slider changes, a restart may not always be required. For a full UAC change through EnableLUA or the equivalent security policy, restart Windows so the system loads the new security behavior correctly.

🧩 Summary & Key Takeaways

You can configure User Account Control in Windows 10 and Windows 11 from User Account Control Settings, Control Panel, Registry Editor, Command Prompt, PowerShell, Local Security Policy, or Group Policy. The safest everyday setting is usually the default level that notifies you when apps try to make changes.

If you disable UAC, treat it as a temporary troubleshooting step. After testing or installing trusted legacy software, restore EnableLUA = 1, use the recommended prompt behavior, and keep the secure desktop enabled for stronger protection.