Windows Vista tip of the week: Make UAC less annoying

Readers of this site and listeners of the Windows Weekly podcast know that I advocate the use of User Account Control (UAC), Microsoft's unfairly maligned security technology. UAC does a lot more than just prompt you when you're about to make a potentially dangerous change to the system or run a program you downloaded from the Internet. It's also behind such related features as Internet Explorer 7's Protected Mode and Vista's virtualized file system and registry. So running UAC is, I think, a necessity for all Vista users.

That said, I do understand that some people find UAC's regular prompts to be somewhat annoying. Fortunately, you can leave UAC enabled but turn off the prompts. The following tip refers to Windows Vista users utilizing an administrator-class account (which I assume is most people) and should be utilized by power users and others who really know what they're doing.

Windows Vista Business, Enterprise, and Ultimate
Open Local Group Policy Editor (Start Menu Search, gpedit.msc), and navigate to Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options. In the right pane, scroll down to User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode. Double-click this entry and use the drop-down box in the Local Security Setting to change the value from Prompt for consent to Elevate without prompting. Then click OK and chose the Local Group Policy Editor. (Users looking for even more stringent security controls can go in the opposite direction and change the value to Prompt for credentials. This will cause every UAC dialog that appears to require you to enter your password.)

Windows Vista Home Basic and Home Premium
Open the Registry Editor (Start Menu Search, regedit.exe) and navigate to HKEY_LOCAL_MACHINE, SOFTWARE, Microsoft, Windows, CurrentVersion, Policies, System. In the right pane, find the value named ConsentPromptBehaviorAdmin. Double-click it and change its value data from 2 to 0. Then click OK and close the Registry Editor.

Like other UAC changes, this change will trigger a Windows Security Center warning. To turn off this warning--not recommended unless you really know what you're doing--launch Security Center and click the link titled Change the way Security Center alerts me in the left side of the window. Then, choose Don't notify me and don't display the icon (not recommended) from the resulting dialog.

This tip is derived from Chapter 9 of Windows Vista Secrets 2nd Edition, coming soon from Wiley & Sons.

Discuss this Article 10

Cfischer83
on May 11, 2008
Maybe it's just me, but I think I can hit "Continue" or "Allow" the once or twice a week (max) that I see it. Do you have a way of stopping OS X's far more annoying and continuous please-type-administrator-password-athon? ;)
Lindy
on May 11, 2008
http://www.tweak-uac.com/ one of the first tweeks I made back when I actually ran Vista.
gorath
on May 11, 2008
doesn't this kind of make UAC pointless anyway, if it just elevates without permission?
xtreem0
on May 12, 2008
@gorath Yes but this is assuming that you already know the files that you are going to download are save. And if your some sad user from xp who fined's any secerity prompting a terrible idea (never used linux or osx).
AlanRR
on May 12, 2008
I don't mind UAC prompts, what I find frustrating is when it prevents me from doing things I want to do. As an example, I open the hosts file in a non-elevated copy of notepad I can't save any changes back to the default location. I would rather UAC prompt me and allow elevated save permissions.
nmg82
on May 12, 2008
very useful tip paul...thanks...
gorath
on May 12, 2008
But what's the difference between doing this, an turning UAC off?
pthurrott
on May 12, 2008
If you turn off UAC, you lose Vista features like Internet Explorer 7's Protected Mode and the virtualized file system and registry.
gorath
on May 12, 2008
Doesn't bypassing UAC make them ineffective anyhow? (round and round!)
subzerohitman721
on May 13, 2008
Good tip, but I think this is one of those Vista issues blown way out of proportion. Its only for the umpteenth time, ONE CLICK. Its such a non issue for me. You guys act like its 20 clicks and your passworld. Just leave the UAC on and deal with the one click.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• 120 Technical
Sessions
• Networking with Peers
• Expert Speakers


Come See Paul Thurrott & Mary Jo Foley in Person!

Register Now

Office 365 InfoCenter

Get the latest insight and info from Paul

Read Now!

What I Use