User Account Control
User Account Control (UAC) is a fundamental security control that helps mitigate the impact of malware, yet some enterprise administrators disable UAC at the request of the users because it is seen as an annoying and unnecessary prompt that gets in the way of productivity. The feature has improved greatly since it was first launched (as part of Windows Vista), so we encourage you to ensure this is enabled across all managed computers in your environment. Microsoft tests all software with the defaults enabled, therefore disabling UAC may cause unexpected results for application launches or security configurations.
With UAC enabled, Windows 11 prompts for consent, or for credentials of a valid local administrator account, before starting a program or task that requires a full administrator access token. This prompt ensures that no malicious software can be silently installed.
If the user is logged on with local admin rights (which is not recommended), the consent...
