How to disable User Account Control UAC

Issue

In Windows Server and client OS machines, you are getting various permissions related prompts when launching applications or certain application features which require elevation are not working as expected.

Solution

Disable entirely or configure the User Account Control (UAC) feature of Windows.

To disable UAC entirely, logon to the Windows machine(s) in question with a user which is a member of the local admins group. Run an elevated Powershell window and execute the following cmdlets:

Set-ItemProperty -Path REGISTRY::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System -Name EnableLUA -Value 0 -Force
Set-ItemProperty -Path REGISTRY::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System -Name ConsentPromptBehaviorAdmin -Value 0 -Force

There are various registry settings such as the ones shown above in the Powershell cmdlets which control User Account Control (UAC). Full reference of all UAC related registry settings can be found at: https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings#registry-key-settings

Alternatively you can use group policy to configure UAC settings. There are 10 Group Policy settings that can be configured for User Account Control (UAC). Full GPO reference for UAC can be found at: https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings

Was this article helpful?

Related Articles