The Computer Oracle

Windows 10 make UAC always require password

--------------------------------------------------
Rise to the top 3% as a developer or hire one of them at Toptal: https://topt.al/25cXVn
--------------------------------------------------

Music by Eric Matyas
https://www.soundimage.org
Track title: Forest of Spells Looping

--

Chapters
00:00 Windows 10 Make Uac Always Require Password
00:25 Accepted Answer Score 30
00:43 Answer 2 Score 3
01:50 Answer 3 Score 5
03:28 Answer 4 Score 0
03:42 Thank you

--

Full question
https://superuser.com/questions/1085680/...

--

Content licensed under CC BY-SA
https://meta.stackexchange.com/help/lice...

--

Tags
#windows10 #uac

#avk47



ACCEPTED ANSWER

Score 30


This is controlled by the registry entry here:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]

And you want the value of:

"ConsentPromptBehaviorAdmin"=dword:00000001

Source

ConsentPromptBehaviorAdmin's value reference




ANSWER 2

Score 5


You can paste this snippet into an Administrative PowerShell prompt:

Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value 1

The Set-ItemProperty command is essentially used to change values of registries. The rest of the parameters of the prompt are relatively intuitive, but I'll go through the rest.

As seen in other answers/responses, the path of the registry (can also be accessed with regedit) is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System - but in this case HKEY_LOCAL_MACHINE is shortened to HKLM and appended with :. So in order to access the registry, we use the -Path option (or flag) to note that the following string (surrounded by quotes ") is the desired path of the registry we want to update.

The next option we need to pass is -Name. Which (you guessed it) is for the name of the value we want to update. So now naturally we pass in the value "ConsentPromptBehaviorAdmin". The quotes are necessary because the -Name option expects a string value.

Finally, we set the -Value value to 1. Which by the Windows 10 operating system interprets this as: "Let's basically just always ask for administrative permission for administrative tasks."

Or in their words:

This option prompts the Consent Admin to enter his or her user name and password (or another valid admin) when an operation requires elevation of privilege. This operation occurs on the secure desktop.

Source for registry details: Microsoft docs.




ANSWER 3

Score 3


An even simpler or easier way is once you find the Value name: block, "ConsentPromptBehaviorAdmin" go to the block below which is Value data: and change the number to a "1". It gives you the same result.

ConsentPromptBehaviorAdmin

This key defines the User Account Control behavior for system administrators. The default value is set to prompt but do not require credentials to be entered. Here are all possible values:

  • 0: A value of 0 allows administrators to perform operations that require elevation without consent (meaning prompts) or credentials (meaning authentication).
  • 1: A value of 1 requires the admin to enter username and password when operations require elevated privileges on a secure desktop.
  • 2: The value of 2 displays the UAC prompt that needs to be permitted or denied on a secure desktop. No authentication is required.
  • 3: A value of 3 prompts for credentials.
  • 4: A value of 4 prompts for consent by displaying the UAC prompt.
  • 5: The default value of 5 prompts for consent for non-Windows binaries.



ANSWER 4

Score 0


Although this post may be outdated, have you considered running the account that requires a password prompt as a non-admin and then inputting the admin credentials? This may be the most effective approach.