X

Taming Vista's User Account Control

The User Account Control feature in Windows Vista has been known to drive normally level-headed people over the edge with frustration. But shutting it off isn't the best answer. In this walkthrough, Ed Bott explains how to tone down the hard edges of UAC without sacrificing its protection.
By Ed Bott, Senior Contributing Editor
199469.jpg
1 of 15 Ed Bott/ZDNET
By Ed Bott

User Account Control is one of Windows Vista's most controversial and most misunderstood features. In this walkthrough, I'll help you smooth over some of its harder edges without shutting it off completely.

By default, the consent dialog box appears on a dark background. That feature is called the Secure Desktop, and it demands your undivided attention. Until you click Continue or Cancel, you can't do anything else.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199470.jpg
2 of 15 Ed Bott/ZDNET
If you're running Vista Business, Ultimate, or Enterprise, you can use the Local Group Policy Editor (gpedit.msc) to change this security setting. Double-click the entry circled in red and change it from Enabled to Disabled.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199471.jpg
3 of 15 Ed Bott/ZDNET
On systems running Vista Home Basic or Home Premium, the Local Group Policy Editor isn't available, so you'll have to edit the registry. Open the key shown at the bottom of this window and change the PromptOnSecureDesktop value to 0, as shown here.


For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199472.jpg
4 of 15 Ed Bott/ZDNET
After you've successfully disabled Secure Desktop, the consent dialog box continues to appear, but it doesn't demand your attention with nearly as much insistence. In fact, you can leave the dialog box open and continue to use other Windows programs and features.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199473.jpg
5 of 15 Ed Bott/ZDNET
If you turn off UAC, you get rid of the annoying dialogs, but yo also turn off some useful security features. A better solution? Use the Group Policy option shown here (or a matching registry edit) to automatically approve all consent requests. Use this option only if you understand the security risks, and keep reading for my advice on the best way to use it.


For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199474.jpg
6 of 15 Ed Bott/ZDNET
One way to make effective use of the "elevate without prompting" option is to assign it to an administrative account that you use only for administrative tasks. Start here in Control Panel, creating a new account and clicking the Administrator option.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199475.jpg
7 of 15 Ed Bott/ZDNET
After creating an account that you'll use only for administrative tasks, use this account management option to change your everyday account so that it runs as a standard user.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199476.jpg
8 of 15 Ed Bott/ZDNET
After choosing the Standard user option, click Change Account Type. You can now safely use this account for everyday work, and switch to the other account when you need to perform administrative tasks.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199477.jpg
9 of 15 Ed Bott/ZDNET
If you choose the option to automatically elevate UAC consent requests without prompting, it applies to all accounts in the Administrator group. In that case, you want to make sure you have one and only one Administrator account; all the rest should be Standard accounts, as shown here.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199478.jpg
10 of 15 Ed Bott/ZDNET
Do you have a program or utility that badgers you for consent every time you run it? If your account is in the Administrators group, you can use this trick as a workaround. Start by Opening Task Scheduler and clicking the Create Task link on the right.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199479.jpg
11 of 15 Ed Bott/ZDNET
On the General tab of the Create Task dialog box, enter a name (I've highlighted it in yellow here) and click the Run with highest privilege box at the bottom.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199480.jpg
12 of 15 Ed Bott/ZDNET
On the Actions tab, click New and then select Start a Program from the Action list. Enter the full path of the program as shown here, with any optional arguments or a starting directory or both.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199481.jpg
13 of 15 Ed Bott/ZDNET
Don't let the "scheduled" part of this utility fool you. Click the Settings tab and make sure tis option is selected. Instead of running at a specified time or in response to an event, you choose when to fire off the task.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199482.jpg
14 of 15 Ed Bott/ZDNET
If you always had to open the Task Scheduler program to run the task you just defined, it wouldn't be much of a time-saver, would it? Instead, create a shortcut using the command syntax shown here. Make sure the command name, in quotes, exactly matches the name of the command you created earlier.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.
199483.jpg
15 of 15 Ed Bott/ZDNET
In the final step of the Create Shortcut wizard, enter a descriptive name for the shortcut and then click Finish. You can now drag that shortcut onto the Sart menu, the Quick Launch bar, the desktop, or any other place that is convenient for you. When you double-click it, your program opens with full administrative privileges but without any UAC dialog boxes.

For the full story and step-by-step instructions, see Fixing Windows Vista, Part 2: Taming UAC.

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes
Holiday lights in Central Park background

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes

21 Photos
Winter backgrounds for your next virtual meeting
Wooden lodge in pine forest with heavy snow reflection on Lake O'hara at Yoho national park

Related Galleries

Winter backgrounds for your next virtual meeting

21 Photos
Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes
3D Rendering Christmas interior

Related Galleries

Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes

21 Photos
Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza
img-8825

Related Galleries

Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza

26 Photos
A weekend with Google's Chrome OS Flex
img-9792-2

Related Galleries

A weekend with Google's Chrome OS Flex

22 Photos
Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup
shutterstock-1024665187.jpg

Related Galleries

Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup

8 Photos
Inside a fake $20 '16TB external M.2 SSD'
Full of promises!

Related Galleries

Inside a fake $20 '16TB external M.2 SSD'

8 Photos