How can I disable the User Account Control (UAC) feature on my Windows Vista computer?
2009-09-16 10:13
441 查看
Windows Vista has the built-in ability to automatically reduce the potential of security breaches in the system. It does that by automatically enabling a feature called User Account Control (or UAC for short). The UAC forces users that are part of the local administrators group to run like they were regular users with no administrative privileges.
Although UAC clearly improves the security on Windows Vista, under some scenarios you might want to disable it, for example when giving demos in front of an audience (demos that are not security related, for example). Some home users might be tempted to disable UAC because of the additional mouse clicking it brings into their system, however I urge them not to immediately do so, and try to get used to it instead.
Anyway, if required, you can disable UAC by using one of the following methods:
Click on the Tools tab. Scroll down till you find "Disable UAC" . Click on that line.
Press the Launch button.
A CMD window will open. When the command is done, you can close the window.
Close MSCONFIG. You need to reboot the computer for changes to apply.
You can re-enable UAC by selecting the "Enable UAC" line and then clicking on the Launch button.
*Recommended: Speed up Vista boot times by reducing the number of programs that load at startup. Control your Vista startup list with this Vista app
In Registry Editor, navigate to the following registry key:
Locate the following value (DWORD): EnableLUA and give it a value of 0.
Note: As always, before making changes to your registry you should always make sure you have a valid backup. In cases where you're supposed to delete or modify keys or values from the registry it is possible to first export that key or value(s) to a .REG file before performing the changes.
Close Registry Editor. You need to reboot the computer for changes to apply.
In order to re-enable UAC just change the above value to 1.
If using Local Group Policy you'll need to open the Group Policy Editor (Start > Run > gpedit.msc) from your Vista computer.
If using in AD-based GPO, open Group Policy Management Console (Start > Run > gpmc.msc) from a Vista computer that is a member of the domain. In the GPMC window, browse to the required GPO that is linked to the OU or domain where the Vista computers are located, then edit it.
In the Group Policy Editor window, browse to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.
In the right pane scroll to find the User Access Control policies (they're down at the bottom of the window). You need to configure the following policies:
You'll need to reboot your computers.
Under User Account and Family settings click on the "Add or remove user account".
Click on one of the user accounts, for example you can use the Guest account.
Under the user account click on the "Go to the main User Account page" link.
Under "Make changes to your user account" click on the "Change security settings" link.
In the "Turn on User Account Control (UAC) to make your computer more secure" click to unselect the "Use User Account Control (UAC) to help protect your computer". Click on the Ok button.
You will be prompted to reboot your computer. Do so when ready.
In order to re-enable UAC just select the above checkbox and reboot.
Although UAC clearly improves the security on Windows Vista, under some scenarios you might want to disable it, for example when giving demos in front of an audience (demos that are not security related, for example). Some home users might be tempted to disable UAC because of the additional mouse clicking it brings into their system, however I urge them not to immediately do so, and try to get used to it instead.
Anyway, if required, you can disable UAC by using one of the following methods:
Method #1 - Using MSCONFIG
Launch MSCONFIG by from the Run menu.Click on the Tools tab. Scroll down till you find "Disable UAC" . Click on that line.
Press the Launch button.
A CMD window will open. When the command is done, you can close the window.
Close MSCONFIG. You need to reboot the computer for changes to apply.
You can re-enable UAC by selecting the "Enable UAC" line and then clicking on the Launch button.
*Recommended: Speed up Vista boot times by reducing the number of programs that load at startup. Control your Vista startup list with this Vista app
Method #2 - Using Regedit
Open Registry Editor.In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System
Locate the following value (DWORD): EnableLUA and give it a value of 0.
Note: As always, before making changes to your registry you should always make sure you have a valid backup. In cases where you're supposed to delete or modify keys or values from the registry it is possible to first export that key or value(s) to a .REG file before performing the changes.
Close Registry Editor. You need to reboot the computer for changes to apply.
In order to re-enable UAC just change the above value to 1.
Method #3 - Using Group Policy
This can be done via Local Group Policy or via Active Directory-based GPO, which is much more suited for large networks where one would like to disable UAC for many computers at once.If using Local Group Policy you'll need to open the Group Policy Editor (Start > Run > gpedit.msc) from your Vista computer.
If using in AD-based GPO, open Group Policy Management Console (Start > Run > gpmc.msc) from a Vista computer that is a member of the domain. In the GPMC window, browse to the required GPO that is linked to the OU or domain where the Vista computers are located, then edit it.
In the Group Policy Editor window, browse to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.
In the right pane scroll to find the User Access Control policies (they're down at the bottom of the window). You need to configure the following policies:
You'll need to reboot your computers.
Method #4 - Using Control Panel
Open Control Panel.Under User Account and Family settings click on the "Add or remove user account".
Click on one of the user accounts, for example you can use the Guest account.
Under the user account click on the "Go to the main User Account page" link.
Under "Make changes to your user account" click on the "Change security settings" link.
In the "Turn on User Account Control (UAC) to make your computer more secure" click to unselect the "Use User Account Control (UAC) to help protect your computer". Click on the Ok button.
You will be prompted to reboot your computer. Do so when ready.
In order to re-enable UAC just select the above checkbox and reboot.
相关文章推荐
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- Windows Vista User Account Control (UAC) 全新安全模块“用户帐户控制”
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- Windows Vista User Account Control (UAC) 全新安全模块“用户帐户控制”
- Windows Vista User Account Control (UAC) 全新安全模块“用户帐户控制”
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- Windows Vista User Account Control (UAC) 全新安全模块“用户帐户控制”
- Windows Vista for Developers——第四部分:用户帐号控制(User Account Control,UAC)
- How to disable Fast User Switching in Windows Vista
- How can I disable/modify the SSH login banner for a given user?
- How Can I Minimize a VI to an Icon on the Windows System Tray?
- How can I hide a user from the Welcome Screen in Windows XP?
- Teach Your Apps To Play Nicely With Windows Vista User Account Control(转)
- 在线平互动台活动启动《Discover How to Make the Computer Easier to Use with Windows Vista》
- Sharepoint site showing system account instead of my username on the top right corner.
- Why Can't I Access My DAQ Functions From a Windows 2000 User Account?
- Inside windows vista User Account Control 用户账户控制