How to Change UAC Prompt Behavior in Windows 11

What is User Account Control (UAC)?

User Account Control (UAC) acts as a built-in security guard for Windows 11. This feature stops unauthorized programs from altering system settings behind your back and keeps the PC safe.

Why does this matter? UAC protects hardware from unwanted changes, which remains vital for system security.

Running programs that require administrator privileges (unrestricted system control) triggers a permission prompt from Windows. For instance, Windows might require an administrator username and password before proceeding.

Your Options for UAC Prompt Behavior

Windows 11 lets administrators configure how the User Account Control (UAC) prompt handles permission requests. Options include blocking requests entirely or displaying a secure screen for credential entry.

• Automatically deny elevation requests — The program won’t run. Windows shows an “Access Denied” message instead. Use this if you want to keep things simple and avoid password prompts.
• Prompt for credentials on the secure desktop — Windows switches to a locked-down screen and asks for an admin username and password. If you enter them correctly, the program runs with admin rights.
• Prompt for credentials (Default) — Windows asks for an admin username and password on your normal screen. If correct, the program runs with admin rights.

How to Change UAC Behavior Using Local Security Policy

The Local Security Policy editor manages how the Windows 11 UAC prompt requests permission. This utility controls validation checks prior to system-wide modifications. Press Win+R to open the Run dialog box, type secpol.msc, and press Enter to launch the Local Security Policy editor.

1. Press Win+R to open the Run box.
2. Type secpol.msc and press Enter. The Local Security Policy Editor opens.
3. In the left panel, expand Local Policies › Security Options
4. Find and double-click User Account Control: Behavior of the elevation prompt for standard users in the right panel.
5. Choose the option you want from the dropdown menu:

   • Automatically deny elevation requests
   • Prompt for credentials on the secure desktop
   • Prompt for credentials
6. Click OK to save your choice.
7. ⚠️ Admin privileges required — Restart your 🔄 computer to apply the changes.

How to Change UAC Behavior Using Registry Editor

Home editions of Windows lack the Local Security Policy tool, requiring the Registry Editor for configuration changes. Press Windows Key + R, type regedit, and press Enter to open the registry. Specific registry keys control the behavior.

1. Press Windows Key + R. Type regedit and press Enter to open Registry Editor.
2. Navigate to this folder: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. If you don't see the System folder, right-click on Policies. Select New > Key. Name it System.
4. In the System folder, right-click in the right pane. Select New > DWORD (32-bit) Value.
5. Name the new value: ConsentPromptBehaviorUser
6. Double-click the new value. Set the Base to Decimal. Enter one of these numbers in Value data:

   • 0 = Automatically deny elevation requests
   • 1 = Prompt for credentials on the secure desktop
   • 3 = Prompt for credentials (default)
7. Click OK and close Registry Editor.
8. ⚠️ Admin privileges required — Restart your computer to apply the changes.

Learn More

For more details, visit the official Microsoft page: Microsoft UAC Behavior Settings

Summary

• Windows 11 asks for permission before running some programs. This keeps your PC safe.
• You can change how Windows asks for this permission. You can deny requests, prompt on a secure screen, or prompt normally.
• You can make these changes using the Local Security Policy Editor or the Registry Editor.
• Always restart your computer after making changes so they take effect.