---

Disable UAC by GUI

 

Press Win+R keys

Type useraccountcontrolsettings, Click OK

Move the slider bar to Never notify, Click OK

Click Yes if prompted

Restart the computer

 

---

Disable UAC by regetry

 

reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

reboot

 

---

Win10

 

當 EnableLUA = 0 時

1. 如果不是 admin, double click 要 admin 權力執行的 exe 會無反應

2. 右 Clieck exe 之後 "以系統管理員身分執行" 會變成無效

 

---

Admin Approval Mode

 

Admin Approval Mode: any operation that requires elevation of privilege will prompt the user to approve the operation.

 

---

Secure Desktop

 

secure desktop: only trusted processes running as SYSTEM are allowed to run here (that is, nothing is running at the user’s privilege level)

 

---

UI Automation

 

UI Automation (UIA) is an application programming interface (API) that allows one to access, identify, and manipulate the user interface (UI) elements of another application.

 

---

Policy Setting

 

User Account Control: Admin Approval Mode for the built-in Administrator account     

Disabled (Default)

User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode

Prompt for consent for non-Windows binaries (Default)

=============

User Account Control: Detect application installations and prompt for elevation

Enabled (default for home)

Disabled (default for enterprise)

User Account Control: Only elevate UIAccess applications that are installed in secure locations

Enabled

=============

User Account Control: Run all  in Admin Approval Mode

Enabled (Default)

Disabled. Admin Approval Mode and all related UAC policy settings are disabled.

=============

User Account Control: Virtualize file and registry write failures to per-user locations

Enabled

=============

A) User Account Control: Switch to the secure desktop when prompting for elevation

Enabled. (Default) All elevation requests go to the secure desktop regardless of prompt behavior policy settings for administrators and standard users.
Disabled. All elevation requests go to the interactive user's desktop.

Prompt for credentials
Enabled: The prompt appears on the secure desktop.     
Disable: The prompt appears on the interactive user's desktop.

Prompt for consent     
The prompt appears on the secure desktop.     
The prompt appears on the interactive user's desktop.

B) User Account Control: Behavior of the elevation prompt for standard users

Prompt for credentials on the secure desktop  (Default)

C) User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop.

This policy setting controls whether User Interface Accessibility (UIAccess or UIA) programs can automatically disable the secure desktop for elevation prompts used by a standard user.

Enabled: UIA programs, including Windows Remote Assistance, automatically disable the secure desktop for elevation prompts.

If you do not disable the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting,
the prompts appear on the interactive user's desktop instead of the secure desktop.

Disabled: (Default) The secure desktop can be disabled only by the user of the interactive desktop

or

by disabling the "User Account Control: Switch to the secure desktop when prompting for elevation" policy setting.

 

---