Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want to be able to run as a non-admin domain account for normal work and be prompted for elevation when needed. This is fine when not in a domain as the elevation prompt remembers my user name and I just have to enter my password. In a domain environment, however, the elevation prompt does not remember the domain (the local machine) or the username from the local machine. How can I get the UAC/Elevation prompt to remember this information?

share|improve this question

2 Answers 2

up vote 8 down vote accepted

Finally found the answer:

Launch C:\Windows\System32\gpedit.msc using Run As Administrator (from the right click menu) and enable the following setting:

Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Credential User Interface / Enumerate administrator accounts on elevation

share|improve this answer
Nice answer, I like that one, adding it to my list of little things to try out and remember. Must look at whether this is available via domain group policy as well. Only thing I don't like is that it only lists local accounts which are in the admin group, so if I want to use a domain admin account, or some domain\PCTechSupportUser account which I have added to local admins via a restricted groups policy these don't show up. So -1 for using this in corporate environments, but +3 for small installs, home groups etc. –  AdamV Nov 5 '09 at 10:17

For those using a Home edition of Windows which lacks the policy editor, you can create the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI and add a EnumerateAdministrators of type DWORD set to 1.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.