How to Turn On or Off UAC for the Windows 11 Built-in Administrator
UAC (User Account Control, a security feature that asks for your permission before apps make changes to your PC) lets you manage security prompts for the Windows 11 built-in administrator account. Windows 11 hides this main administrator profile by default and keeps UAC turned on to protect your system from bad software.
You can turn UAC on or off for this account using 2 different methods. Turning UAC off lets apps run without asking, but it also leaves your PC open to risks if a harmful app tries to make changes.
Enable or disable User Account Control for the built-in administrator by opening Local Security Policy (secpol.msc) or Registry Editor (regedit). Modify the “Admin Approval Mode for the Built-in Administrator account” setting or the “FilterAdministratorToken” registry value, then restart your PC.
Turn UAC On or Off Using Local Security Policy
This approach relies on the Local Security Policy Editor, a management tool designed for altering workstation security configurations.
Steps:
- Press Windows key + R on your keyboard to open the Run box.
- Type secpol.msc and press Enter.
- In the window that opens, go to Local Policies Security Options on the left side.
- Look for the setting called “User Account Control: Admin Approval Mode for the Built-in Administrator account” on the right side.
- Double-click that setting.
- Choose Enabled to turn UAC on or Disabled to turn it off.
- Click OK.
- Close the Local Security Policy Editor.


You can use the Local Security Policy Editor to manage the Windows 11 UAC administrator setting by running a quick command. This built-in tool lets you change how User Account Control handles the main administrator account on your PC without digging through complex menus.
Turn UAC On or Off Using Registry Editor
The Windows Registry Editor offers an alternative method for making this change. Proceed with caution, as incorrect tweaks can affect system stability.
Steps:
- Press Windows key + R, type regedit, and press Enter.
- If prompted by UAC, click Yes to continue.
- In the Registry Editor, navigate to this path:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
- If the System folder is missing, right-click on Policies, select New Key, and name it System.
- Right-click on the right side pane inside System and select New DWORD (32-bit) Value.
- Name this new value FilterAdministratorToken.
- Double-click the FilterAdministratorToken entry.
- Choose Decimal as the base.
- Set the value data:
- 1 to turn UAC ON for the built-in administrator.
- 0 to turn UAC OFF.
- Click OK and close the Registry Editor.
- Restart your computer to apply the changes.


Summary
- The built-in administrator account in Windows 11 has full control and can run without asking for UAC permission.
- Using this account without UAC can be risky, as dangerous changes might happen without warning.
- You can turn UAC on or off for this account by using either the Local Security Policy Editor or the Registry Editor.
- Always restart your PC after making these changes so they take effect.
The Windows 11 UAC administrator settings control whether the hidden main administrator account asks for your permission before making system changes. Turning this security feature on keeps your PC safer by stopping rogue apps from making changes behind your back.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!