UAC keeps reverting to back to highest elevated level

[maddog909]

I have a standard user that keeps reverting back to the highest level UAC. I've changed it as a local admin (move it down one notch) and as the standard user. It'll stick at times but then it'll revert back to the highest level (always notify). why doesnt a standard user UAC stick to what i change it to. There's no domain or local policy that has been set. Note the default profile has been change to mimic a user I created. example. johndoe after setting it up, was copied, renamed to default and the original default was name to default_old. this was done so any new user will have johndoe setup if that makes sense

 

[Anak]

Hi maddog909, welcome to 7F!

I found this thread: https://social.technet.microsoft.com/Forums/windows/UAC keeps coming back on all by itself. that may offer some insight to your problem especially since that user had also mentioned he didn't have any domains, and no group policy set.
I realize it is a different problem, but it relates because of the steps used in trying to find out what is causing the peculiar action of the UAC.

I couldn't verify some of the files mentioned in that link like, "registry.pol" because I have a version of 7 where the group policy editor was omitted, but you may find an answer to what is changing your settings.

These two quotes from my link are related:

Anyway I did an RSOP.MSC, and noticed this (see attached screenshot).
RSOP screenshot

That is very peculiar - there really shouldn't be anything in the registry.pol file for local policy - local GP is just direct editing of the registry and file system. And your error screen actually implies that something was outside of GPO modifying your settings, but using the domain-based policy caching mechanism to do it. Ordinarily I would say this was likely malware, except that it would be trying to turn your UAC settings off . You using any add-on security software, and can you reproduce your behavior again (or is it fixed for good now)?

This sticks out for me:

You are going to need to configure registry auditing (auditpol.exe and enable auditing on the registry key) or use Process Monitor (microsoft.com/sysinternals) in boot logging mode to determine what is turning the registry values back on, since you state you are not getting from a group policy.

Maybe one of your installed programs is causing this?


This could even be a result of your change in the default profile.

Note the default profile has been change to mimic a user I created.

There is good information in the blue Note box here: http://www.sevenforums.com/tutorials/299-user-account-control-uac-change-notification-settings.html
If you can't reverse the changes you may want to try a System Restore.