Change UAC Admin Prompt Behavior in Registry

This article explains how to configure User Account Control (UAC) prompt behavior for administrator accounts using the Windows Registry. It identifies the specific registry path, the exact DWORD value responsible for managing these elevation prompts, and the complete list of numeric options available to customize how administrative elevation requests are handled.

The Specific Registry Value

The UAC prompt behavior for administrators is controlled by the ConsentPromptBehaviorAdmin DWORD value located in the following registry path:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Available Value Settings

To change the behavior, edit the ConsentPromptBehaviorAdmin value using one of the following numeric data inputs:

• 0 (Elevate without prompting): Automatically grants administrative privileges without displaying any UAC prompt.
• 1 (Prompt for credentials on the secure desktop): Requires the administrator to enter their username and password on the isolated secure desktop.
• 2 (Prompt for consent on the secure desktop): Prompts the administrator to click “Yes” or “No” to allow elevation on the secure desktop (default setting).
• 3 (Prompt for credentials): Requires username and password input on the standard interactive desktop rather than the secure desktop.
• 4 (Prompt for consent): Displays the standard “Yes” or “No” prompt on the interactive desktop.
• 5 (Prompt for consent for non-Windows binaries): Only prompts for consent when third-party or non-Windows applications request elevation.

How to Modify the Setting

1. Press Windows Key + R, type regedit, and press Enter.
2. Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. Locate and double-click ConsentPromptBehaviorAdmin in the right-hand pane.
4. Set the Base to Hexadecimal or Decimal, enter your desired number (0 through 5), and click OK.
5. Restart your computer or sign out for the changes to take full effect.