Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Can each user have different UAC level in a PC? Specifically, can an Admin have UAC level set to "never notify" and a User have UAC level set to "always notify" and so on?

share|improve this question

migrated from stackoverflow.com Dec 6 '12 at 6:28

This question came from our site for professional and enthusiast programmers.

3 Answers 3

up vote 4 down vote accepted

The UAC level is a machine wide setting. So it cannot be set per-user.

share|improve this answer
    
But can user and admin can have different UAC level? Please see my comment above.thank you. –  winman Dec 6 '12 at 5:45
    
Hard to believe for a setting stored in HKLM. So, I've no idea what you did in your experiment, but it doesn't hang true. You must remember that UAC is very different for users and admin. For a user, there is no consent dialog. For a user there's either no UAC, or the over the shoulder dialog for every process that requires elevation. –  David Heffernan Dec 6 '12 at 7:38
    
I think my question made everyone confusing.All user have same UAC level in my PC. But admin is in different UAC level.Is this possible? –  winman Dec 6 '12 at 8:12
    
@winman no, this is not possible. For users, the slider is useless, it only effects members of the admin group. –  magicandre1981 Dec 6 '12 at 8:28
    
@magicandre1981 What do you mean by slider is useless for user.I know that User cannot change UAC level,only admin can change it.But can admin set diffeent UAC level for him(admin) and user( for all user accounts it will be same)? –  winman Dec 6 '12 at 9:15

The setting is written in the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System path inside the registry. So it is an system wide setting.

I belive, that in the Professional+ version of Windows you can define the setting using gpedit.msc, which should allow different settings per user.

share|improve this answer
1  
Why would the ability to modify using gpedit mean that the setting became per user? –  David Heffernan Dec 5 '12 at 14:02
    
Thank u Daniel for your reply.But what i wanted to know is about UAC levels.(Always notify,Notify me only when programs try to make changes to my computer,Notify me only when programs try to make changes to my computer,Never notify).My doubt is For example can admin have UAC level as never notify and user as "always notify".It can be any level but should be different for admin and user.Is this possible? (In one of my PC when i view UAC window it was in different level in admin and user account) –  winman Dec 5 '12 at 14:02
    
Just now i tried creating a administrator account with UAC level never notify and then i created user account(standard user) for which i gave "always notify".but when i create one more user account(standard user) it's UAC level was set to "always notify". Now if i change any of one of two user accounts UAC level the other users UAC level changes automatically.If i change UAC level of admin it does not cause change to UAC level of user and vice versa!!.So does user and admin can have different UAC level? –  winman Dec 5 '12 at 14:26
    
The relevant group policy settings are under Computer Configuration, so they cannot be defined per-user. However, there are three distinct settings: one applies to the built-in Administrator account, one to all other admin accounts, and one to all standard user accounts. –  Harry Johnston Dec 9 '12 at 23:42
    
@winman: in Windows 7, at least, the UAC control panel won't even start up for a standard user account when UAC is turned off, so what exactly do you mean when you say the standard user's UAC level was set to always notify? –  Harry Johnston Dec 9 '12 at 23:55

It sounds as if you want to make it so that elevation occurs silently for admin users but standard users can still enter a password to be elevated.

If your edition of Windows supports Group Policy, you can do this. First, use the control panel GUI to restore the "Always Notify" setting.

Using gpedit.msc, go to Local Computer Policy: Computer Configuration: Windows Settings: Security Settings: Local Policies: Security Options.

Set "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" to "Elevate without prompting".

Reboot.

It is probably possible to do the same thing via the registry on Windows editions that don't support group policy, but I don't know how to do this.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.