How to Turn On or Off UAC for the Windows 11 Built-in Administrator
User Account Control (UAC) for the Windows 11 built-in administrator account stops security pop-ups when apps make changes to your PC. Windows 11 hides this main administrator profile by default and keeps UAC turned on to protect you from bad software.
You can turn UAC on or off specifically for this built-in admin account using two simple methods. Turning UAC off lets apps run without asking, but it also leaves your PC open to risks if a harmful app tries to make changes.
Enable or disable User Account Control for the built-in administrator by opening Local Security Policy (secpol.msc) or Registry Editor (regedit). Modify the “Admin Approval Mode for the Built-in Administrator account” setting or the “FilterAdministratorToken” registry value, then restart your PC.
Turn UAC On or Off Using Local Security Policy
This approach relies on the Local Security Policy Editor, a management tool designed for altering workstation security configurations.
Steps:
- Press Windows key + R on your keyboard to open the Run box.
- Type secpol.msc and press Enter.
- In the window that opens, go to Local Policies Security Options on the left side.
- Look for the setting called “User Account Control: Admin Approval Mode for the Built-in Administrator account” on the right side.
- Double-click that setting.
- Choose Enabled to turn UAC on or Disabled to turn it off.
- Click OK.
- Close the Local Security Policy Editor.
Remember to restart the machine after applying these updates.
Turn UAC On or Off Using Registry Editor
The Windows Registry Editor offers an alternative method for making this change. Proceed with caution, as incorrect tweaks can affect system stability.
Steps:
- Press Windows key + R, type regedit, and press Enter.
- If prompted by UAC, click Yes to continue.
- In the Registry Editor, navigate to this path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
- If the System folder is missing, right-click on Policies, select New Key, and name it System.
- Right-click on the right side pane inside System and select New DWORD (32-bit) Value.
- Name this new value FilterAdministratorToken.
- Double-click the FilterAdministratorToken entry.
- Choose Decimal as the base.
- Set the value data:
- 1 to turn UAC ON for the built-in administrator.
- 0 to turn UAC OFF.
- Click OK and close the Registry Editor.
- Restart your computer to apply the changes.
Summary
- The built-in administrator account in Windows 11 has full control and can run without asking for UAC permission.
- Using this account without UAC can be risky, as dangerous changes might happen without warning.
- You can turn UAC on or off for this account by using either the Local Security Policy Editor or the Registry Editor.
- Always restart your PC after making these changes so they take effect.
Background details regarding the primary administrator profile reside in the following resource: How to Enable the Administrator in Windows 11.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!