How to Set User Account Control to Always Notify

What Causes This?

User Account Control (UAC) may not be set to Always notify because Windows was left on its default level, a user lowered it to reduce prompts, or a system tuning tool changed the setting. In some cases, malware or unwanted software tries to weaken UAC so programs can make system changes with less warning. Raising UAC to the highest level helps you catch silent elevation attempts and unexpected admin actions.

Common Symptoms

• Apps install or change system settings without a clear approval prompt
• You suspect UAC was lowered after using a tweak or cleanup tool
• Windows only prompts sometimes, not for every admin-level change
• You want stronger protection against unauthorized system changes
• Security reviews show UAC is not at the highest setting

How to Fix It Manually

1. Open the UAC settings

   • Press Windows key and type uac.
   • Click Change User Account Control settings.

2. Move the slider to the highest level

   • In the User Account Control Settings window, drag the slider all the way to the top:
     • Always notify me when:
       • Apps try to install software or make changes to my computer
       • I make changes to Windows settings
   • This is the strongest UAC setting.

3. Save the change

   • Click OK.
   • If prompted by User Account Control, click Yes to confirm.

4. Test that UAC is working

   • Try opening an app that requires administrator rights.
   • For example:
     1. Press Windows key and type cmd.
     2. Right-click Command Prompt.
     3. Select Run as administrator.
   • You should now see a UAC prompt before the app opens with elevated rights.

5. If the slider is grayed out or won’t stay changed

   • Make sure you are signed in with an administrator account.
   • If this is a work or school PC, the setting may be controlled by Group Policy.
   • Restart the PC after changing the setting, then check it again.

6. Check the setting through Control Panel if needed

   • Press Windows key + R, type Control, and press Enter.
   • Go to User Accounts > User Accounts > Change User Account Control settings.
   • Confirm the slider is still set to Always notify.

7. Advanced check: verify secure desktop behavior

   • Press Windows key + R, type secpol.msc, and press Enter.
   • Go to Local Policies > Security Options.
   • Review these policies:
     • User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
     • User Account Control: Switch to the secure desktop when prompting for elevation
   • For best protection, secure desktop should be enabled. If you don’t have this tool, your Windows edition may not include it.

Fix It Automatically with Kudu

Kudu can check whether important Windows security settings, including UAC-related protections, are configured safely and help fix weak configurations without digging through multiple menus. It’s a quick way to review your PC’s security posture and catch settings that reduce protection.

Download Kudu Free →