Windows 7, 8, and 10 user accounts with administrative privileges operate differently than the administrator account in previous versions of Windows.
Instead of giving administrative accounts complete and unrestricted access to everything on the PC, these accounts act like normal user accounts until an action requires administrative privileges. turn on. At this point, the entry account Admin approval mode so that the user can approve the action.
Much improved over Windows Vista’s admin approval handling, Windows 7/8/10 strikes the right balance between security and usability. Luckily, Microsoft can further customize how Admin Approval Mode works on PCs.
Depending on where your computer is located and who uses it, you can upgrade or downgrade your PC security by changing the way Windows 7/8/10 uses Administrator Approval Mode. You can also read my posts on how to turn off Admin Approval Mode.
Note: To access the Local Privacy Policy on a Windows computer, you must be running the Pro version or later. This will not work for Windows Home, Home Premium or Starter editions.
Table of Contents
Change the way Admin Approval Mode works
To make changes to the way Administrative Approval Mode works on PCs running Windows 7/8/10, start by logging into the operating system with an account with administrative privileges. Click Start – All Programs – Administrative Tools (Windows) – Local Security Policy.
Now you should look at Local security policy options window.
In the left pane, click the folder titled Local Policy and then on the folder labeled Security Options. Find an option in the right pane titled User Account Control: Advanced Admin Prompt Behavior in Admin Approval Mode.
Right click on this option and select Characteristic from the menu.
You will notice that you have six options in the drop-down menu in the properties window.
Below is a description of each option for the Administrator Approval Mode elevation.
Six admin approval mode options
Each of the six Administrator Approval Mode Options forces Windows to behave differently when it comes to upgrading approvals for applications and functions that require approval to run in the operating system.
Note that a safe screen is when the entire screen is dimmed until you accept or decline the request in the UAC prompt. Check out my other post to understand how UAC works.
Advanced without prompting
This is the most convenient option, but also the least secure. Whenever an application or function tries to run that would normally require administrator approval, the application or function will automatically run as if it had been authorized to run.
Unless your PC is in a super secure location isolated from the network, this is not a wise choice.
Prompt for credentials on the Secure Screen
This option is more secure than the default setting. Whenever an action pops up asking for administrator approval, Windows will actually prompt the user for a username and password on the security screen.
Prompt for consent on the Safe Screen
Instead of prompting for a username and password like the option above, Windows will only ask the user to approve the action on the security screen.
Prompt for login information
This option works similar to the one above titled Prompt for credentials on the Secure Screen, except that the user enters a username and password without the added security of a safe screen.
Prompt for consent
Like the option above titled Consent Reminder on Security Deskp, this option only asks the user to approve the action but does so without the added security of a safe screen.
Consent prompt for non-Windows Binaries
This is the default Admin Approval Mode option. With this option, the user is only asked to agree to an action if the action requires consent and is not an action that has been verified or enforced by Windows.
Binaries are simply compiled executable code synonymous with applications or programs. Just behind Advanced without prompting above, this is one of the most liberal Admin Approval Mode options.
Windows strikes a good balance between security and an uninterrupted computing experience, but still allows you to further customize how you consent to actions that require administrator approval.
By changing the Administrator Approval Mode options, you can create a custom operating system environment that allows you to increase or decrease security depending on your individual needs for administrative security.
