Knowledge Base →5 min readUpdated: 2026-09-21

What Each UAC Level in Windows Means for Your Security

User Account Control (UAC) is the prompt that asks for permission before a program changes system settings, and its slider in Control Panel has four positions: Always notify, the default, the default without screen dimming, and Never notify. The level decides when you are asked and whether the prompt appears on the secure desktop — the dimmed screen behind the dialog. The default, second from the top, is the right choice for almost everyone.

The four levels on the slider

Open the applet by pressing Win+R and typing UserAccountControlSettings, or via Control Panel, User Accounts, Change User Account Control settings. The vertical slider has four positions, and two of them differ only in whether the screen dims. What changes between levels is which actions trigger a prompt and whether that prompt appears on the secure desktop.

The two top positions both use the secure desktop, and only those two are considered safe against spoofing. The bottom position is not a true off switch: for a standard user account UAC keeps working, and elevation still requires an administrator password. The differences sound small, but the secure desktop is exactly the part that malware has the hardest time faking.

  • Always notify — a prompt for every system change, including your own changes in Windows settings, on the dimmed secure desktop
  • Default (second from the top) — prompts only when programs make changes; your own changes in Settings stay silent
  • Default without dimming — the same prompts, but without switching to the secure desktop
  • Never notify — no prompts for administrators; elevation happens silently

What the dimming actually protects against

When a prompt appears, Windows switches to a separate secure desktop — the darkened screen behind the dialog — that ordinary applications cannot reach. A program cannot move the mouse there, cannot click the Yes button for you and cannot overlay a fake window on top. That is the whole point of the dimming: not decoration, but the guarantee that the click comes from a physical person.

Level 3 drops the secure desktop to avoid the flicker, trading real security for comfort: in theory a malicious program could spoof the dialog or simulate input. Level 4 removes prompts for administrators entirely, so any process in your session can elevate without asking. Standard accounts keep the password prompt even at Never notify, which is why they are the safer setup for daily work.

Choosing a level without breaking anything

Keep the default second level; it prompts rarely in normal work and keeps the secure desktop. If an old game or tool floods you with prompts, grant that one program permanent admin rights (Properties, Compatibility, Run this program as an administrator) instead of lowering UAC system-wide. And never turn UAC off by setting EnableLUA to 0 in the registry — Microsoft Store apps stop launching, and the slider does the same job without the damage.

The prompt count also drops when software is well behaved, so outdated installers are a better target for optimization than the slider. For the strongest setup, use a standard account daily and keep an administrator account for the rare tasks that need one. Microsoft has never removed UAC from Windows because it remains one of the cheapest defenses against silent elevation.

Questions and Answers

Should I turn UAC off to stop the prompts?

No. The prompts come from programs requesting admin rights, and turning UAC off removes the last barrier for malware — keep the default level and give trusted programs permanent rights instead.

Why does the screen go dark when a UAC prompt appears?

Windows switches to a secure desktop that other software cannot touch, so nothing can click Yes for you. The dark screen is a security feature, not a bug.

Does UAC still work with a standard user account?

Yes, and it works harder: a standard user must type an administrator password to elevate. That is the most secure combination on a home PC.

Know what is included before you buy.

The one-time 30-minute trial covers core tools. PRO-labelled features stay locked until a paid license is activated.

Read next

All articles · FAQ

Write to us: [email protected]