See a demonstration of how to use the User Account Control.
- [Instructor] User Account Control, or UAC, is an essential part of Microsoft Security control for Windows 10. It ensures that apps and tasks are always running in non-administrator accounts unless specifically approved or elevated by an administrator. These non-administrative accounts do not have administrative privileges to install new apps or make system-wide changes, therefore, unauthorized system changes and unauthorized installations, for example, by installing a malware keylogger, are prevented from being made.
User Account Control allows users to logon to PCs and complete tasks and access data using the access rights granted to their user account. You should train your users to be aware of why the UAC prompt appears. This could be that they have tried to do something that they're not allowed to do, or that malware is trying to install itself onto the PC. If a user has a genuine requirement to configure a system setting or install a new app, they'll need to call the IT Support and a Support Professional will then need to approve the changes.
IT Support can approve a UAC request and provide administrative credentials either in person or via a remote connection. Administrators can amend the notification settings for UAC, but for most systems, this is unnecessary as most of the time a user won't even notice UAC on a Windows 10 machine. This is because most users will already have their apps and settings configured. You may find that users become frustrated with User Account Control.
Certainly if they're new to using Windows. In practical experience, UAC only really prompts during the initial configuration and installation of apps, but then soon settles down and users rarely see it. On screen is a list of the tasks that standard users can perform on their PC without a UAC prompt appearing. The list of tasks is quite long and hopefully this will reassure users that UAC is not meant to be restrictive.
Let's drop onto our demo PC and see how to use User Account Control. First, I'll click the Start and then type UAC. I'll select Change User Account Control settings. The UAC interface allows a simple slider option which can be moved all the way to the bottom to turn off notifications, which is not recommended, or moved all the way to the top to set the setting to always notify.
As you move the slider up and down, the advice box on the right will give information relating to each of the four levels that you can choose from. At the bottom is never notify. Next is notify when apps try to make changes and don't dim the computer. Also not recommended. The next level up is the default setting of notify me when apps try to make changes and dim the screen. The top level is always notify for all changes, including changes made by the user.
If your users report a lot of notifications, then you could reduce the level, but it's better to educate your users about why UAC is in place and that it does a good job. Finally, for some specialist scenarios, you can drop into group policy and modify how UAC behaves. This is especially useful if you're logging in as an administrator. You can configure UAC using group policy settings found in Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options.
- Enterprise desktop support skills and traits
- Remote troubleshooting
- Troubleshooting hardware and device issues
- Using System Restore
- Securing user accounts
- Resolving networking issues
- Managing files and disks
- Troubleshooting sharing and file access issues
- Resolving app compatibility
- System resource issues: RAM, CPU, and more
- Essential Windows 10 maintenance
- Windows 10 startup issues