What is Windows Vista User Account Protection (UAP)?

John Savill

September 9, 2005

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. Users and administrators who log on with highly privileged accounts for their typical day-to-day activities leave their systems vulnerable to Trojan horses and viruses. UAP or Limited User Accounts (LUA) as it's also known, is a new security feature in Vista that protects the system by restricting the system to limited privileges even if you're logged on to an account with Administrative credentials. When you attempt to run a feature that requires administrative credentials, the system prompts you for your password (or prompts you to log on using a different account) as the figure shows.

You can change this feature to just ask whether you want to run the program with administrative credentials and therefore not have to retype your password. To do so perform these steps:

  1. Start the registry editor.

  2. Navigate to the HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciessystem registry subkey.

  3. Double-click the ConsentPromptBehavior DWORD value.

  4. Set the value to 1 and click OK.

  5. Log off and log back on for the change to take effect. The system now displays a different dialog box that simply asks for verification that you want to perform an action, as the figure shows.

To disable UAP, click Start, "Turn UAP Settings On or Off," and click Yes, as the figure shows. You'll need to log out and log on for the change to take effect.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like