How to change User Access Control behavior for standard users on Windows

By default, standard users on Windows can run programs with admin rights if they enter the admin password when prompted by User Access Control (UAC).

However, this is not the only behavior that UAC has for standard user accounts, and you can change it depending on how secure these accounts are and the computer’s environment. The following article will show you how.

Unlike when changing the UAC behavior for the admin account, the behavior for the standard user account is a bit more restrictive. According to the Microsoft Learn website, here are the behaviors you can choose from and what they mean:

The default UAC behavior for standard user accounts is Prompt for credentials , but Microsoft recommends changing it to Automatically deny elevation requests . That way, only users with an admin account can decide how UAC works and make choices that will keep computers safe.

The easiest way to change how UAC behaves for standard users is to adjust the policy User Account Control: Behavior of the elevation prompt for standard users . To do that, open Local Group Policy Editor and follow the steps below.

Note : Local Group Policy Editor is not available by default on Windows Home. Therefore, let’s see how to access the Local Group Policy Editor on Windows Home before continuing.

1. Go to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options .

2. Right-click the User Account Control: Behavior of the elevation prompt for standard users policy and select Properties in the menu.

READ:  How to fix the error Run as Administrator does not work in Windows

3. Expand the drop-down list and choose a different UAC behavior.

4. Click OK.

Remember that only admin can change the behavior of UAC. For example, if a standard user tries to change it using the Local Group Policy Editor, they may receive an Access denied error message.

If you are looking for another way to change UAC behavior for standard users or Local Group Policy is not working on your computer, you can make the changes in the Windows Registry instead.

However, before you do that, you should create a system restore point to protect your computer in case something goes wrong. Once you do that, open the Registry Editor and follow the steps below:

1. Copy HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem and paste it in the address bar at the top of the Registry Editor.

2. Press Enter on your keyboard to go to the System key.

3. Right click on the ConsentPromptBehaviorUser value in the right panel and select Modify.

4. In the Value data text box, enter 0 for Automatically deny elevation requests , 1 for Prompt for credentials on the secure desktop or 3 for Prompt for credentials .

5. Click OK.

6. Now, restart your computer for the changes to take effect.