Explain OTT – UAC (User Account Control) in Windows 10 / Windows 10

User account control is one of those features in Windows that many people really don’t understand. Most people just get annoyed when you keep getting pop-up dialogs asking for permission to do things like install apps, change settings, etc., etc. Many people even disable UAC just for them don’t bother with it.

First of all you should read the great guide written by How to Geek on why UAC shouldn’t be disabled in Windows 7. Now their article often says you shouldn’t disable UAC and I totally agree with that. this point of view.

However, in Windows 10, there has been a big change in the way UAC works and it is now designed to keep your computer safe even when you turn off UAC. I will explain more about how it works in this article.

First, let’s understand a little bit about what UAC does. I won’t go into detail because you can read the above mentioned article for more details. Basically, when you log on to your computer as Administrator, the applications running on your computer do not have the same Administrative privileges as your account.

Instead there is something called an integrity level. The highest level of integrity means that an application will have full admin access. A medium integrity process will have the same access as a standard user account with limited privileges.

In Windows 7/Vista disabling UAC is really not a good idea as all processes then run at the highest integrity level, which means if you catch some malware in when using IE, the malware will have full administrator access to your system just like IE.

However, all this changes in Windows 10. In Windows 10, you can’t even disable UAC without hacking the registry or modifying group policy.

In Windows 7, if you go to Dashboardclick User account and then click Change User Account Control settingsyou can drag the bar to Never notice.

You can also get to this same dialog box by following the same path in Windows 10. Here’s the difference: in Windows 7, UAC is actually completely disabled. In Windows 10, UAC is not disabled, you just don’t get notifications.

Correct, the UAC service continues to run and all admin elevation requests are approved automatically while all standard user elevation requests are denied automatically. So how can you actually disable UAC?

Firstly, the reason Microsoft did this is because there is a new security feature in Windows 10 for Universal Store apps called AppContainer that actually restricts which areas of the operating system apps can also be found. can read and write. Once you actually disable UAC in Windows 10, you can’t run any apps from the Windows store! Yes, you heard that right!

If you disable UAC in Windows 10, you won’t be able to run apps from the Windows Store (Universal Apps). Instead, you will get a nice dialog sayingThis application cannot be opened. Applications cannot be opened while User Account Control is disabledChrysanthemum.

So, with that in mind, how do you disable UAC in Windows 10? The easiest and best way is to edit the local security policy. You can do that by clicking Start and typing secpol.msc. Extend Local Policy and then click Security options.

Scroll down User Account Control: Run All Admins in Admin Approval Mode. It should Enabled by default If you want to disable UAC, double click it and select Handicapped.

If you cannot edit the local security policy, you can also change the value in the registry (click Start and type regedit).

You must go to the following registry key:

HKEY_LOCAL_MACHINE  SOFTWARE  Microsoft  Windows  CurrentVersion  Chính sách  Hệ thống

Find AllowLUA key and change the value to 0, disable UAC. The second you make that change, you’ll see a message from the Action Center saying you must reboot to disable UAC.

So, permanently disabling UAC in Windows 10 is also a bad idea. However, move the slider all the way down Never notice It’s really not as bad as it used to be. Now instead of UAC being actually disabled you will just get fewer prompts and all processes will run at the appropriate integrity level based on the original request.

This means you don’t have to worry about the process with elevated permissions anymore in Windows 10! Only by disabling UAC through the methods above will you get the same effect as disabling UAC in Windows 7 when all processes run at the highest integrity level.

So without disabling UAC, how to make an application run with the highest level of integrity in Windows 10? Well, actually having to ask for permission in the code, that means a lot of programs won’t work well with Windows 10 unless they rewrite the code to get the right permission.

In short, remember that no matter what you read online, turning the slider to Never notify in Windows 10 will not disable UAC. Second, moving the slider all the way down is not as dangerous as it used to be in Windows 7 and Vista.

If you really don’t want those prompts, this is the best option while keeping your system safe. Finally, if you really want to disable UAC in Windows 10, use the methods above, but keep in mind that you won’t be able to run any Windows Store apps.

If you have any questions about UAC in Windows 10, feel free to post your comments here and I will try to help. Enjoy!