What the prompt actually does
Since Windows Vista, even an administrator account runs programs with a filtered token: day-to-day processes get no power to write into Windows, Program Files or HKLM in the registry. When a program needs that power, Windows pauses everything, dims the screen and asks for consent; that dimmed, frozen state is the secure desktop, a surface nothing else can draw over, which is precisely what makes spoofing the dialog so hard.
The practical effect: malware that arrives through your browser can run, but it cannot quietly install itself into the system, load a driver or set up a service — without an elevation you would see. UAC did not make Windows unbreakable, but it moved the goalpost from 'you clicked, you're owned' to 'it has to ask you first'.
The four levels — and the one that matters
The slider in User Account Control Settings offers four positions, and the differences between them are smaller than people think. The default is the sweet spot; only the bottom position meaningfully changes your exposure.
- Always notify — prompts on every change, including your own settings tweaks; maximum friction
- Default — notify when apps want to change the system, with the dim; what 99% of machines should use
- Notify without dimming — same prompts, but no secure desktop; slightly weaker anti-spoofing
- Never notify — elevation is approved instantly for admins, meaning malware in your session no longer has to ask anyone
Real prompts, fake prompts, and what not to do
A real elevation prompt appears only on the dimmed secure desktop, freezes the rest of the screen, and names the program and publisher — blue for signed Windows components, yellow for unsigned. If a 'UAC-like' dialog pops up on a normal, undimmed desktop, or an app asks you to 're-enter your password' inside itself, that is not UAC; it is a drawing.
Disabling UAC entirely removes the gate and, on Windows 11, breaks a pile of apps that expect elevation to exist. If the prompts annoy you for one trusted tool, use 'Run as administrator' from its context menu or set it once in the compatibility tab, and leave the global setting alone. For family machines, the strongest free hardening is making daily accounts standard: elevation then requires the admin password, and the kids' malware simply cannot ask.
Questions and Answers
Should I disable UAC to stop the prompts?
No. 'Never notify' auto-approves elevation for admin accounts, so any malware running in your session would silently gain full system rights. Keep at least the third level, or use per-app 'Run as administrator' for trusted tools.
What is the difference between the four UAC levels?
Levels one to three change how often you are notified and whether the secure desktop dims; the prompts still appear. The fourth level, 'Never notify', is the only one that removes the consent dialog — and with it the protection.
Know what is included before you buy.
The one-time 30-minute trial covers core tools. PRO-labelled features stay locked until a paid license is activated.
Read next
Write to us: [email protected]