Redefining Privileges for Non-Administrative Windows Users
Redefining Privileges for Non-Administrative Windows Users
By default, standard users on Windows can run programs with elevated privileges if they enter an administrator password when prompted by User Access Control (UAC).
However, this is not the only behavior that the UAC has for standard user accounts, and you can change it depending on how secure these accounts are and the environment the computer is in. We’re going to show you how.
The UAC Behaviors Available for Standard User Accounts
Unlike when changing UAC behaviors for administrator accounts , the behaviors for standard user accounts are a little more limited. According to the Microsoft Learn website, here are the behaviors you can choose and what they mean:
- Automatically deny elevation requests: This option returns an Access denied error message to standard users when they try to perform an operation that requires elevation of privilege. Most organizations that run desktops as standard users configure this policy to reduce help desk calls.
- Prompt for credentials on the secure desktop: When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different username and password. If the user enters valid credentials, the operation continues with the applicable privilege.
- Prompt for credentials: An operation that requires elevation of privilege prompts the user to type an administrative username and password. If the user enters valid credentials, the operation continues with the applicable privilege.
The default UAC behavior for standard user accounts is Prompt for credentials, but Microsoft recommends you change it to Automatically deny elevation requests. That way, only users with administrator accounts can decide how the UAC behaves and make choices that will keep the computer safe.
How to Change the UAC Behavior for Standard Users in the Local Group Policy Editor
The easiest way to change the way UAC behaves for standard users is to tweak the User Account Control: Behavior of the elevation prompt for standard users policy. To do that, open the Local Group Policy Editor and follow the steps below.
The Local Group Policy Editor isn’t available by default on Windows Home. As such, check out how to access the Group Policy Editor on Windows Home before continuing.
- Head to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.
- Right-click the User Account Control: Behavior of the elevation prompt for standard users policy and select Properties in the menu.
- Expand the dropdown and choose a different UAC behavior.
- Click OK.
Keep in mind that only administrators can change the behavior of the UAC. If a standard user tried to change it using the Local Group Policy Editor, for example, they’d probably get an Access denied error message.
How to Change the UAC Behavior for Standard Users in the Registry Editor
If you’re looking for another way to change UAC behavior for standard users, or the Local Group Policy is not working on your computer, you can make changes in the Windows registry instead.
Before you do that, however, we recommend you create a system restore point to protect your computer in case you make a mistake. Once you do that, open the Registry Editor and follow the steps below:
- Copy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System and paste it into the address bar at the top of the Registry Editor.
- Press Enter on your keyboard to go to the System key.
- Right-click the ConsentPromptBehaviorUser value in the right panel and select Modify.
- In the Value data text box, enter 0 for Automatically deny elevation requests, 1 for Prompt for credentials on the secure desktop, or 3 for Prompt for credentials.
5. Click OK.
Now restart your computer to allow the changes to take effect.
Control UAC’s Behavior for Standard Users on Windows
UAC is an integral part of protecting your Windows computer from malicious programs that want to run with elevated privileges. While you can’t make it elevate programs without prompting, you can make it stricter by setting it to Automatically deny elevation requests. And, as you can see, it is quite easy to do, whether you’re using the Local Group Policy Editor or the Registry Editor.
However, this is not the only behavior that the UAC has for standard user accounts, and you can change it depending on how secure these accounts are and the environment the computer is in. We’re going to show you how.
Also read:
- [Updated] 2024 Approved Complete TikTok Termination Protocol Unveiled
- [Updated] 2024 Approved Unleash Your SEO Potential Explore the Most Effective 7 Free Video Tags Extractors
- 5 Ways to Reset Infinix GT 10 Pro Without Volume Buttons | Dr.fone
- A Comprehensive Guide to Using W11's Auto HDR
- Don't Relininas Chatbots for Secure, Authenticated Win 11 Keys
- How To Revive Your Bricked OnePlus Ace 2 Pro in Minutes | Dr.fone
- How to Stop the Mouse From Freezing in Excel
- In 2024, 3 Solutions to Find Your Vivo Y02T Current Location of a Mobile Number | Dr.fone
- In 2024, Top Apps and Online Tools To Track Xiaomi Redmi Note 12R Phone With/Without IMEI Number
- Optimal Charger Solutions for GoPro Hero5 Genuine & Imitative Companies for 2024
- Overcoming x3daudio.dll Errors on Your PC: Essential Troubleshooting Techniques
- Personalized Pixel Panorama: Themed Displays for Each Window of WIN 10/11
- Set Your Desktop's Mood with Spotlight Controls
- Unleash Potential in Vintage Gear: Installation of 22H2 Win11
- Title: Redefining Privileges for Non-Administrative Windows Users
- Author: Joseph
- Created at : 2024-09-27 01:09:02
- Updated at : 2024-10-01 20:56:13
- Link: https://windows11.techidaily.com/redefining-privileges-for-non-administrative-windows-users/
- License: This work is licensed under CC BY-NC-SA 4.0.