A well designed User Account Control experience helps prevent unwanted system-wide changes in a way that is predictable and requires minimal effort.
With User Account Control (UAC) fully enabled, interactive administrators normally run with least user privileges, but they can self-elevate to perform administrative tasks by giving explicit consent with the Consent UI. Such administrative tasks include installing software and drivers, changing system-wide settings, viewing or changing other user accounts, and running administrative tools.
In their least-privileged state, administrators are referred to as Protected administrators. In their elevated state, they are referred to as Elevated administrators. By contrast, Standard users can’t elevate by themselves, but they can ask an administrator to elevate them using the Credential UI. The Built-in Administrator account doesn’t require elevation.
The Consent UI used to elevate Protected administrators to have administrative privileges.
UAC provides the following benefits:
- It reduces the number of programs that run with elevated privileges, therefore helping to prevent users from accidentally changing their system settings, and helping to prevent “malware” from gaining system-wide access. When elevation is denied, malware is only able to affect the current user’s data. Without elevation, malware can’t make system-wide changes or affect other users.
- For managed environments, well designed UAC experiences allow users to be more productive when running as Standard users by removing unnecessary restrictions.
- It gives Standard users the ability to ask administrators to give them permission to perform administrative tasks within their current session.
- For home environments, it enables better parental control over system-wide changes, including what software is installed.
You must be signed in as an administrator to be able to change UAC settings.
- Click on Start Button and Type User Account Control Setting in the Search box and open it. If prompted by UAC, click on Yes.
- Move the slider uppermost end, and click/tap on OK.
- Click on OK. Click YES if you UAC pop-up.
- Open RUN dial-up box by pressing Win key+R and type secpol.msc and hit Enter. You will Local Security Policy program.
- Go to Local Policies>Security Options and find User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode, Now double-click on it, under Local Security Settings, click on the drop down menu and select prompt for credentials and Apply.
Now when you delete/edit/rename any system file, you will get UAC prompt. Enter Administrator Password to modify.