User Account Control and Administrator Rights on Windows 10
Pinterest Stumbleupon Whatsapp
Advertisement

Are you the network administrator for your household or family? At some point, one of your nearest and dearest will install something nefarious or break something without meaning to, and that’s why the type of Windows User Account used makes the difference.

If everyone on your network is using an Administrator account, you’re going to have a bad time. That said, there’s a lot of confusing information regarding what Standard accounts can and cannot do. Here’s what you need to know.

What Are Windows User Accounts?

Every time you use your Windows 10 computer, you log in to a User Account. If you are the only user on your computer 5 Tips for Managing Windows User Accounts Like a Pro 5 Tips for Managing Windows User Accounts Like a Pro Windows user accounts have evolved from isolated local accounts to online accounts with various privacy challenges. We help you sort out your accounts and find the settings that work for you. Read More , it is likely you have an Administrator account. Administrator accounts are privileged, meaning they can perform any action on the system, with minimal restriction (usually requiring a password for confirmation).

Windows user accounts

Standard accounts can use the computer in the literal sense: browsing the internet, sending emails, playing games, using software, and so on. Standard accounts can also make some system changes, with restrictions, and nothing that affects the other users on the same system.

There is also an option for a dedicated Child account in Windows 10 Check Out The New Windows 10 Parental Control Options Check Out The New Windows 10 Parental Control Options Windows 10 parental control reports offer details of your child's online behaviour and activity. Some parents are horrified, whilst others welcome it. Let's look at how to use these settings to secure your computer. Read More . These accounts come with a range of limitations as well as integrated monitoring for overseeing parents. Windows also has a range of integrated parental controls The Best Windows 10 Parental Control Tools The Best Windows 10 Parental Control Tools Wondering how to make your PC child-friendly? Our Windows 10 parental control tools and advice will help you control kids' computer usage and keep them safe online. Read More .

The real consideration is to the account type in conjunction with the User Account Control (UAC) setting.

Understanding UAC and User Accounts

The default setting for both Standard and Administrator accounts is to use UAC. This is the first thing that some users switch off, deeming it unnecessary and time-consuming.

But look at it another way: every time you have to enter your password, you know a malicious process must do the same. And if the malicious process doesn’t know the password, you instantly save yourself from a world of computing-hurt, plus save a boat-load of time in the process.

Let’s consider how UAC works with both accounts.

Both Standard and Administrator accounts access resources and run programs in the security context of a standard user. When you enable UAC, each app requires the go-ahead using an administrator access token.

This means your account, Administrator or Standard, is protected using the same security mechanisms. What differs is the permissions available to each account which in turn are moderated using User Account Controls.

User Account Control Prompts

So, when UAC is enabled, a Standard account receives different levels of prompts to maintain security. The prompts ensure the user is validating each significant change to the system, rejecting anything unknown or unexpected (in theory, at least).

user account control settings in windows

UAC Levels

You can set UAC to one of four levels:

  • Always notify me: The highest UAC level, requests validation for every application, every piece of software, and every change to Windows settings.
  • Notify me only when applications try to make changes: The default UAC level, requests validation for new applications, but not Windows settings.
  • Notify me only when applications try to make changes: This is the same as the default UAC level but does not dim the desktop when the validation prompt appears.
  • Never notify me: The lowest UAC level, you receive no notifications for any system changes, at any time for the specified user account.

The default setting is fine for the majority of users. Of course, that depends on the user. The difference comes in the type of prompt the user receives, which depends on the account.

Consent Prompt

An Administrator account will receive a consent prompt. This prompt appears for the three levels of UAC that require validation. The administrator only needs to click through the consent prompt to confirm the changes to the system.

user account control consent prompt in windows

Credential Prompt

A Standard account instead receives a credential prompt. Unlike the logged-in Administrator account consent prompt, a credential prompt requires the administrator password to validate the system changes.

user account control credential prompt in windows

Color Codes

UAC verification prompts are color-coded, too. This allows both Standard and Administrator accounts to understand the risk posed to the system immediately.

  • Red background with a red shield icon: The app is blocked by Group Policy 12 Ways Windows Group Policy Can Make Your PC Better 12 Ways Windows Group Policy Can Make Your PC Better The Windows Group Policy grants you advanced control over your system, without having to mess with the registry. We'll show you how to easily customize Windows in ways you didn't think were possible. Read More or is from a publisher that is blocked.
  • Blue background with a blue and gold shield icon: The application is a Windows 10 administrative app, such as a Control Panel item.
  • Blue background with a blue shield icon: The application is signed by using Authenticode and is trusted by the local computer.
  • Yellow background with a yellow shield icon: The application is unsigned or signed but is not yet trusted by the local computer.

Should I Use an Administrator Account?

An Administrator account is important. Every system has one as you’d be unable to install software and make other changes without one. But should your primary account be an Administrator?

The answer actually lies in your system users.

For instance, I am the only person that uses this system. Therefore, I run a password protected Administrator account. But on the family laptop, I have a password-protected Administrator account and a Standard account with UAC enabled. UAC is what makes the difference, for both Standard and Administrator accounts.

In that, you do not necessarily need to use an Administrator account as your default. Sure, it speeds up certain things, but entering your password only takes a second. I wouldn’t go as far as entirely disabling the Administrator account, as some other guides suggest.

But again, this depends on who is using the system. It is possible to hide an account, rather than completely disable it (Windows has a hidden Administrator account for technical use How to Unlock the Secret Administrator Account in Windows How to Unlock the Secret Administrator Account in Windows Administration rights are now handled by User Account Control in Windows, but the hidden Administrator account is powerful. Here's how to enable it. Read More ).

Furthermore, turning UAC notifications off isn’t a great idea. It simply removes a basic level of system security that at times will save your system from a malicious process.

And even if you turn the notifications off, UAC is still running. It just means every validation request is immediately approved. For Standard accounts, however, it means all validation requests are immediately denied.

TL;DR: A Standard account with the correct UAC settings is just as useful as an Administrator account, and perhaps even a little more secure.

Enjoyed this article? Stay informed by joining our newsletter!

Enter your Email

Leave a Reply

Your email address will not be published. Required fields are marked *

  1. Aisha Ginn
    February 21, 2018 at 2:18 am

    Great post. I was checking continuously this blog and I'm impressed! Very useful info specially the last part :) I care for such information a lot. I was looking for this certain info for a long time. Thank you and best of luck.

  2. Romaine Gilbreath
    February 20, 2018 at 9:22 pm

    Este curso é extremamente prático e sem embromação.

  3. Antonio Jowett
    February 20, 2018 at 6:08 pm

    Hi, its good piece of writing about media print, we all know media is a great source of information.

  4. Marcy Pinson
    February 20, 2018 at 5:58 pm

    Quality content is the main to interest the visitors to pay a quick visit the site, that's what this web page is providing.

  5. Effie Guinn
    February 20, 2018 at 11:54 am

    We're a bunch of volunteers and starting a brand new scheme in our community. Your website provided us with valuable info to work on. You've done a formidable task and our whole community shall be grateful to you.

  6. Brandy Charteris
    February 20, 2018 at 10:08 am

    Hmm it appears like your website ate my first comment (it was extremely long) so I guess I'll just sum it up what I had written and say, I'm thoroughly enjoying your blog. I as well am an aspiring blog writer but I'm still new to the whole thing. Do you have any helpful hints for beginner blog writers? I'd really appreciate it.

  7. Pam Nielsen
    February 20, 2018 at 9:13 am

    Very quickly this web site will be famous among all blogging people, due to it's good posts

  8. Winfred Watters
    February 20, 2018 at 9:08 am

    Superb, what a weblog it is! This webpage gives helpful data to us, keep it up.

  9. Terrie Schulze
    February 20, 2018 at 6:59 am

    After retiring at age 28, Jones achieved nine professional triumphs.

  10. Ruby Deshotel
    February 20, 2018 at 6:12 am

    Gloriousconfusion - hey. Thanks in your remark. To clarify, my statement was an observation of what others are doing.

  11. Leandro Bach
    February 19, 2018 at 10:39 pm

    Superb website you have here but I was wondering if you knew of any discussion boards that cover the same topics talked about in this article? I'd really like to be a part of group where I can get feedback from other experienced individuals that share the same interest. If you have any recommendations, please let me know. Thanks a lot!

  12. Maximilian Lawler
    February 19, 2018 at 8:32 pm

    Now,we want be back to move 1997-1998 season,within 36 minute,Jordon has received 26.7,Kobe has obtained 26.eight.

  13. Alvaro Adam
    February 19, 2018 at 9:54 am

    There's definately a great deal to find out about this issue. I love all of the points you've made.

  14. Brandy Kohler
    February 19, 2018 at 8:19 am

    Right now it appears like Drupal is the best blogging platform out there right now. (from what I've read) Is that what you are using on your blog?

  15. Bennett Macleod
    February 19, 2018 at 6:04 am

    Excellent, what a weblog it is! This weblog presents helpful facts to us, keep it up.

  16. wellmakemoney
    February 18, 2018 at 11:15 am

    This MAKEUSEOF site everytime helps me to solve my query's ,
    My blog name is WellMakeMoney. I am writing post and suddenly message comes your disk space is low !!!
    And loook i found my solution ;)

  17. Felipa Fairweather
    February 18, 2018 at 8:23 am

    What's up it's me, I am also visiting this web site regularly, this website is really fastidious and the people are genuinely sharing fastidious thoughts.

  18. Effie Madison
    February 18, 2018 at 4:35 am

    Hi! I understand this is somewhat off-topic however I had to ask. Does building a well-established website such as yours require a lot of work? I'm brand new to operating a blog however I do write in my journal everyday. I'd like to start a blog so I can share my experience and feelings online. Please let me know if you have any ideas or tips for brand new aspiring bloggers. Thankyou!

  19. Jackson Follansbee
    February 17, 2018 at 11:47 pm

    Hello, I think your site might be having browser compatibility issues. When I look at your blog site in Opera, it looks fine but when opening in Internet Explorer, it has some overlapping. I just wanted to give you a quick heads up! Other then that, very good blog!

  20. Lynn Ott
    February 17, 2018 at 7:25 pm

    Useful information. Fortunate me I found your web site unintentionally, and I am surprised why this twist of fate did not happened in advance! I bookmarked it.

  21. gottago
    February 17, 2018 at 4:30 am

    I have the Adm account and use a standar one to protect my system against auto installation attempts and to prevent any change in the system files that could break it.

  22. ReadandShare
    February 16, 2018 at 11:42 pm

    I am the only person using my laptop - which is strictly personal/non-business. Just to be sure, it is equally safe for me to use my laptop as an 'administrator' with password (and Default UAC) as it is to use the laptop as a "standard" user (also with Default UAC)?