User Account Control (UAC) - Change Prompt Behavior for Standard Users

    User Account Control (UAC) - Change Prompt Behavior for Standard Users

    User Account Control (UAC) - Change Prompt Behavior for Standard Users

    How to Change Behavior of User Account Control (UAC) Prompt for Standard Users
    Published by
    Designer Media Ltd


    How to Change Behavior of User Account Control (UAC) Prompt for Standard Users

       Information
    This tutorial will show you how to change the behavior of the User Account Control (UAC) elevation prompt for standard users in Vista, Windows 7, and Windows 8.

    You must be logged in as an administrator to be able to do the steps in this tutorial.


       Note
    Description of Options:
    • Prompt for credentials - When an operation or program requires elevation of privilege, the standard user is prompted by UAC to enter an administrator's user name and password before it is allowed.
    • Prompt for credentials on the secure desktop - When an operation or program requires elevation of privilege, the standard user is prompted by UAC on the secure desktop to enter an administrator's user name and password before it is allowed.
    • Automatically deny elevation requests - When an operation or program requires elevation of privilege, the standard user will only get a access denied message and will not be prompted by UAC.
       Warning
    UAC must be turned on with the slider set to a level other than the bottom Never notify level for this policy to be enforced.

    If the UAC settings are set to the Never notify level, then standard users will not get a UAC prompt and will automatically be denied access to anything that requires elevation to run or open.

    How to Change UAC Notification Settings in Windows 7

    OR

    How to Change User Account Control (UAC) Settings in Windows 8 and 8.1







    OPTION ONE

    Using Local Security Policy


    1. Open the Local Security Policy editor.

    2. In the left pane, expand Local Policies, and click/tap on Security Options. (see screenshot below)
    User Account Control (UAC) - Change Prompt Behavior for Standard Users-security-1.jpg
    3. In the right pane of Security Options, double click/tap on User Account Control: Behavior of the elevation prompt for standard users. (see screenshot above)

    4. Select the behavior you want for the UAC elevation prompt for standard users, and click/tap on OK. (see screenshot below)
    NOTE: The default setting is Prompt for credentials. See the blue note box at the top of the tutorial for a description of each setting.
    User Account Control (UAC) - Change Prompt Behavior for Standard Users-security-2.jpg
    5. Close the Local Security Policy editor.



    OPTION TWO

    Using a REG File Download


    1. Do step 2, 3, or 4 below for what you would like the behavior of the UAC elevation prompt for standard users to be.

    2. To Have UAC "Prompt for credentials" for Standard Users
    NOTE: This is the default setting.
    A) Click/tap on the Download button below to download the file below, and go to step 5 below.
    Users-UAC_Prompt-for-credentials.reg


    Download

    3. To Have UAC "Prompt for credentials on the secure desktop" for Standard Users
    A) Click/tap on the Download button below to download the file below, and go to step 5 below.
    Users-UAC_Prompt-for-credentials-on-secure-desktop.reg


    Download

    4. To Have UAC "Automatically deny elevation requests" for Standard Users
    A) Click/tap on the Download button below to download the file below, and go to step 5 below.
    Users-UAC_Automatically-deny-elevation-requests.reg


    Download

    5. Save the .reg file to your Desktop.

    6. Double click/tap on the downloaded .reg file to merge it.

    7. If prompted, click/tap on Run, Continue (UAC-Vista) or Yes (UAC-Windows 7/8), Yes, and OK to approve the merge.

    8. Log off and log on, or restart the computer to apply the changes.

    9. When done, you can delete the downloaded .reg file if you like.
    That's it,
    Shawn





    Related Tutorials




  2. TDPsGM
    Posts : 26
    Windows 7 Ultimate x64
       New #1

    Thanks for that, however, what happens, if with all those changes, the standard user is never given the options to to provide a password?

    On all of my machines it works perfectly . . . except for one, and for the life of me I can not figure out why.

    All that happens in the standard account is that I get a window that pops up that says something to the effect: "You don't have permission to run this program. Log in to an administrator account and run the install program again." ====> That's not exactly what it says; I can get the exact quote if you like, but that is what I am left with.

    I have even tried creating a new user to see if there was something wrong with the Current standard user I have.
    I get the same problem.

    Does anyone have any ideas as to how I can get it to work again?
    (My administrator account does have a password set)

    Windows 7 Ultimate 64 bit
      My Computer
    Quote Quote

  4. Brink
    Posts : 72,043
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #2

    Hello TSPsGM,

    I'm already assuming that you user step 2 Option One in the tutorial, but you might als double check to see if you have UAC turned on to at least the "Default" or "Always notify" level to see if that may be a cause.

    User Account Control - UAC - Change Notification Settings

    Hope this helps, :)
    Shawn
    Last edited by Brink; 22 Aug 2012 at 13:14.
      My Computer
    Quote Quote

  5. TDPsGM
    Posts : 26
    Windows 7 Ultimate x64
       New #3

    Thanks for the response Shawn.

    Yes I have double checked the settings and it is on for both the Administrator AND the Standard Account user.

    I have even set both to the MAX security level, and I still don't get the option.

    It really has me baffled as to why it doesn't give me the 'OPTION' to insert a password in order to elevate an install to admin levels.

    Anyone else got an idea?
      My Computer
    Quote Quote

  6. Brink
    Posts : 72,043
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #4

    Do you have the other UAC policy settings set to their default settings like in the screenshot under step 2 in the tutorial?

    You might also double check using the method in the tutorial below to see if you may have any Group Policy settings enabled that could be affecting this.

    Group Policy Editor - Quickly View Enabled Policies in Windows
      My Computer
    Quote Quote

  7. TDPsGM
    Posts : 26
    Windows 7 Ultimate x64
       New #5

    Both Accounts have the UAC enabled to the max setting.
    Step 2 Checks out.

    Checked Group policies as mentioned --- all are "Not Configured"

    This is a real head scratcher for me.

    This is basically a clean install as well so it is not like it has been running for a while and got corrupeted.

    I just ran sfc /verifyonly at the command prompt, and all files seem fine.
      My Computer
    Quote Quote

  8. Brink
    Posts : 72,043
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #6

    Sorry, but the other "UAC....." settings in Local Security Policy in that screenshot. :)
      My Computer
    Quote Quote

  10. mike6623
    Posts : 255
    Windows 8 Pro
       New #7

    Where do you do this from so that it sets the policy for all users, not just the one machine? Where are these directions showing these changes being made? On the server? AD? On the end user's pc? The admin pc, or what? What if you want it to prompt for ALL domain users?
      My Computer
    Quote Quote

  11. Brink
    Posts : 72,043
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       New #8

    Hello Mike, :)

    You should be able to set UAC for domains in Domain Security Policy instead.

    https://technet.microsoft.com/en-us/.../dd277396.aspx
      My Computer
    Quote Quote

 

  Related Discussions
How to Change UAC Notification Settings in Windows 7 When turned on, User Account Control helps prevent potentially harmful programs from making changes to your computer in Windows 7 by notifying and asking you for permission before letting the program run or install. This will show you...
Aloha All, My issue started when I tried to delete files in the hidden cache of Dropbox. I went into "my computer", clicked on my C drive, scrolled down to "Users" and found file "All Users" with a "locked" icon attached. I clicked on it and up popped an error message that I don't have...
Does anyone know why by default running regedit under a standard user account does not prompt the UAC for administrative credentials? Under an admin account the UAC does prompt when running regedit, but obviously does not prompt for admin credentials. I was successful at adding and modifying...
I'm trying to change the settings back to "never notify", but every time I click the link, after typing it in the search bar, nothing happens. Wile in the user account menu, the 4 options with an admin symbol next to them don't work either. I'm assuming that's the problem, I don't have admin...
I am about to start using Windows 7 Home Premium. As I understand it, a Standard user can install software if that user can provide a valid Administrator User name and password during the install process, when prompted by Windows 7. My question is, if you providide a Standard user with...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 18:35.
Find Us