How to Disable UAC in Windows 11 for Standard Users

Understanding User Account Control (UAC)

User Account Control, or UAC, is Windows’ built-in protection against unwanted or harmful programs. It stops them from making changes without your permission. When a program tries to do something important, such as installing 💿 software or changing system settings, UAC asks for approval first.

How strict UAC is depends on the kind of account you use. An administrator usually sees a simple Yes/No prompt. A standard user sees a different one. For standard users, UAC can do one of three things:

• Block the request outright.
• Ask for an administrator’s username and password on the normal desktop.
• Ask for the same credentials on a dimmed screen called the secure desktop.

This guide focuses on adjusting these settings for standard users.

Why Change UAC Behavior?

UAC prompts keep your PC safe, but they can get in the way. You may want to change the behavior for standard users if the prompts appear too often, or if a particular program triggers a lot of them.

• Fewer Interruptions: If you often use a standard account and UAC prompts get in your way, you can choose a setting that needs less interaction. For example, you can turn off the dimmed secure desktop.
• Specific App Needs: Some legitimate programs trigger UAC prompts more often than usual. Changing the setting can make them easier to live with.
• Better Security for Standard Users: In some cases you want to be sure standard users can never gain extra permissions, even with a password prompt. Automatically denying elevation requests does exactly that.

Changing UAC settings affects your computer’s security. Understand what each option does before you pick one. In most cases it is best to leave UAC on at a sensible level. You must be signed in as an administrator to make these changes.

Change UAC Behavior Using Local Security Policy (🪟 Windows 11 Pro, Enterprise, Education)

If your PC runs Windows 11 Pro, Enterprise, or Education, you can use the Local Security Policy tool. It lets you adjust UAC settings precisely, and it works like a specialized control panel 🎛️ for your PC’s security rules.

Windows 11 Home does not include this tool. If you use Home, skip ahead to the registry method. To check your edition, go to Settings › System › About and look under Windows specifications.

Step 1Open Local Security Policy

You open Local Security Policy from the Run box. Sign in with an administrator account first.

1. Press Win+R on your keyboard. The Run box opens.
2. Type secpol.msc into the box and press Enter or click OK.
3. If a UAC prompt asks whether to allow the app to make changes, click Yes.

The Local Security Policy window opens. It can look complex, but you only need one area of it.

Step 2Find the UAC Settings

With the window open, you need to find the right setting. It is buried in a long list, so take your time.

1. On the left side, find Local Policies and click it to expand it.
2. Under Local Policies, click Security Options. A long list of security settings appears on the right.
3. Scroll down the list until you find User Account Control: Behavior of the elevation prompt for standard users. The settings ⚙️ are sorted alphabetically, and all the User Account Control entries sit together.

Step 3Choose Your UAC Behavior

This setting decides how UAC acts when a standard user needs extra permission.

1. Double-click User Account Control: Behavior of the elevation prompt for standard users. Its Properties window opens.
2. Open the drop-down list on the Local Security Setting tab to see the choices.

These are the options:

• Automatically deny elevation requests: This is the strictest option. If a program needs administrator permission, UAC blocks it with an “Access denied” message. The user never sees a prompt.
• Prompt for credentials on the secure desktop: The screen dims (this is the “secure desktop”), and the user must type the username and password of an administrator account. If they enter them correctly, the program can run.
• Prompt for credentials (default): This is the normal setting. The user enters an administrator username and password on the regular desktop.

1. Select the option that works best for your setup.
2. Click OK to save your choice.

The Properties window closes, and the new setting shows in the Security Setting column of the list.

Step 4Close and Test

To test the change, close the Local Security Policy window. Then sign in as a standard user and try to run something that needs administrator rights, such as an installer. The prompt should behave the way you chose. If it still acts the old way, restart the 🔄 PC and try again.

To undo the change, open the same policy and set it back to Prompt for credentials.

Helpful Tip: If you don’t see “Local Policies” or “Security Options” in the left menu, or if secpol won’t open at all, you are probably on Windows 11 Home. Don’t worry. You can still change UAC behavior with the registry method below.

Change UAC Behavior Using the Windows Registry (All 🪟 Windows 11 Editions)

You can change UAC behavior for standard users on every Windows 11 edition, Home included, by using the Windows Registry. The word “Registry” can sound intimidating, but this method needs only one or two small changes. Even so, be careful. Incorrect changes to the Registry can cause serious problems, so check every step before you move on.

It is a good idea to back it up first. In Registry Editor, click File › Export, choose All under Export range, and save the file somewhere safe. For this specific change the risk is low if you follow the instructions exactly.

Step 1Open the Registry Editor

First, open the Registry Editor.

1. Press Windows key + R on your keyboard.
2. Type regedit into the Run box and press Enter or click OK.
3. If a User Account Control prompt asks whether you want to allow the app to make changes, click Yes.

The Registry Editor window opens, with a tree of folders on the left.

Step 2Go to the Correct Registry Location

Next, go to the key that holds the UAC settings. The exact path is:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

You can click through the folders on the left, or type the path into the address bar, as described below.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

1. Click in the address bar at the top of the Registry Editor window and paste or type the path above.
2. Press Enter. Or click through the folders on the left side instead.
3. Make sure the System folder under the Policies key is selected.

The values stored in this key appear in the right pane.

Step 3Change the 'ConsentPromptBehaviorUser' Value

Look in the right pane of the System folder for an item named ConsentPromptBehaviorUser. If it isn't there, create it:

1. Right-click in the empty space on the right.
2. Select New › DWORD (32-bit) Value.
3. Name it exactly ConsentPromptBehaviorUser, then press Enter.

Then set its value:

1. Double-click ConsentPromptBehaviorUser. A small Edit DWORD (32-bit) Value window pops up.
2. Type your chosen number (0, 1, or 3) in the Value data box. Leave Base set to Hexadecimal, which is the default. These small numbers are the same in decimal.
3. Click OK.

Here is what each number means:

• 0: Automatically deny elevation requests.
• 1: Prompt for credentials on the secure desktop.
• 3: Prompt for credentials (this is the normal behavior).

Step 4Optional - Change 'PromptOnSecureDesktop'

A second value, PromptOnSecureDesktop, controls whether the screen dims when a prompt appears. It lives in the same System key. If you don't see it, create it the same way as above, as a DWORD (32-bit) Value.

1. Double-click PromptOnSecureDesktop in the right pane.
2. Set Value data to 1 to keep the secure desktop dimming turned on.
3. Set Value data to 0 to turn the dimming off. The prompt then shows on the normal desktop, even when credentials are needed.
4. Click OK.

Turning the dimming off makes UAC prompts a little less protected, so only do it if you need to.

Step 5Close Registry Editor and Restart

Close the Registry Editor. Then restart your computer so the UAC changes take full effect. After the restart, sign in as a standard user and trigger a UAC prompt, for example by running an installer. Confirm it behaves the way you intended.

Helpful Tip: To go back to the default UAC behavior for standard users, open the Registry Editor again, go to the same System key, and set the ConsentPromptBehaviorUser value back to 3. If you changed PromptOnSecureDesktop, set it back to 1. Then restart your PC.

Summary

This guide explained how to change User Account Control (UAC) behavior for standard users in Windows 11. UAC acts as your PC's security guard, and you now have two ways to adjust how it handles elevation requests:

• Using Local Security Policy (Windows 11 Pro, Enterprise, and Education) to adjust the elevation prompt behavior.
• Using the Windows Registry Editor (all Windows 11 editions, Home included) to change the same settings by editing specific values.

Be careful when editing the registry, and always understand the security implications of changing UAC settings.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System