SOLVED: How To Set User Access Control (UAC) to the DEFAULT Level via Group Policy

If you want to use Group Policy to configure the 10 UAC related group polices so a Windows 7 client will be set to the third level on the slider bar:

“Default – Notify me only when programs try to make changes to my computer.  Don’t notify me when I make changes to Windows settings.”

open your Group Policy Management tool and either create a new policy or edit an existing one (note I would NOT change the DEFAULT DOMAIN POLICY to protect against maiking a mistake).  Then expand to:

COMPUTER CONFIGURATION > POLICIES > WINDOWS SETTINGS > SECURITY SETTINGS > LOCAL POLICIES > SECURITY OPTIONS  and make the following changes:

 

Admin Approval Mode for the Built-in Administrator account = Disabled

Allow UIAccess applications to prompt for elevation without using the secure desktop = Disabled

Behavior of the elevation prompt for administrators in Admin Approval Mode = Prompt for consent for non-Windows binaries

Behavior of the elevation prompt for standard users = Prompt for credentials

Detect application installations and prompt for elevation = Enabled

Only elevate executables that are signed and validated = Disabled

Only elevate UIAccess applications that are installed in secure locations = Enabled

Run all administrators in Admin Approval Mode = Enabled

Switch to the secure desktop when prompting for elevation = Enabled

Virtualize file and registry write failures to per-user locations = Enabled

group-policy-uac-default-level

Comments

  1. Avatar
    hamid alkindi November 23, 2017 at 7:33 am

    I have the same problem in my domain computer and I need to know how to solve this issue without helping from my office IT

  2. Avatar
    Aaditya October 31, 2017 at 10:34 am

    It’s fixed now, after doing this, disable fast boot then it will be normal.
    Thanks once again

  3. Avatar
    Aaditya October 31, 2017 at 6:35 am

    Thank you for this article, but my laptop still messed up because of changing my UAC settings, seems like I have to install Windows again.

  4. Avatar
    Littleroot March 11, 2016 at 12:00 am

    Very good. Previous admin had used wrong settings and I wanted to get back to default. Thank you

  5. Avatar
    ITinAfrica November 9, 2015 at 11:29 pm

    What are you posting, this are the default setting on Win 10 GPO. This is not help full in anyway

    • Ian Matthews
      Ian Matthews December 27, 2015 at 4:45 pm

      Well, It is useful to me because I want to undo any setting changes that others many have made to UAC. The DEFAULT level is the correct level for most environments.

  6. Avatar
    EVG September 2, 2013 at 8:50 pm

    Wow, that’s what I was seeking for, what a information!

    existing here at this weblog, thanks admin of this web page.

Leave a Reply to Ian Matthews Cancel reply