ItsGeekToMe.co

Q: I am the administrator of my home PC.  So, I run with an account that has Administrator privileges enabled.  Even with this configuration, I still receive occasional annoying prompts asking if I want to do some admin-level action or another.  How can I configure my system to not get these prompts?

 – Jack H.
Fort Walton Beach, Florida

A: You might not like to hear this, Jack, because I believe the honest answer that you need is not necessarily what you’re looking for.  That is, you should not be running an account with Administrator privileges for day-to-day use of your PC.  The reason why is wrapped up in security, and the decision has largely been taken out of your hands since around the time when Windows 7 was in service.

Before I go any further, I want to take a deeper look at what exactly it means to have so-called Administrator privileges, and how in modern versions of Windows that is not the same thing as running the Administrator account.  Any account can have administrator privileges.  That literally means that account is part of the “Administrators” group.  Here’s where it may get confusing.  It may be counterintuitive, but being part of the Administrators group does not mean an account has admin privileges.  What it does mean is that it has the potential to obtain that golden key of full admin access, but there are restrictions that are in place for your own good.

You see, Microsoft realized many years ago that many people thought as you do, Jack, and configured their accounts to have the maximum level of privileges available.  That’s all well and good until some drive-by download, or hidden malware tries to install itself while you’re using your computer.  If you’re running with full Administrator privileges, any process running under your account (whether you explicitly launched it or not) also runs with the same privileges.  That gives the malware the ability to access parts of the operating system and do things on your computer that I promise – you do not want it to do.  So, Microsoft added a little feature called User Account Control or UAC to Windows.  It acts as a sort of gate keeper between the account and those coveted Administrator privileges.  It effectively takes away admin privileges even when you’re running an account in the Administrator group.  Only after UAC prompts you with one of those “annoying prompts” and you consent to your privileges being elevated, are your privileges raised to full administrator status.  Those sneaky malware processes can’t respond to UAC or get around the UAC restrictions, and you are thus protected from yourself.

So, to be clear, when you’re logged into your account, even if it’s in the Administrator group, Windows runs all your applications and process as an ordinary, standard user.  Your everyday activities, web browsing, reading email, using software applications, are all performed with limited privileges rather than as the almighty administrative ruler of the tiny kingdom within your PC.  Then, when you need the higher privileges, UAC prompts you and you must respond before your privileges are raised.  This greatly reduces the potential damage that an errant piece of malware can cause.

Then there’s the other side of the coin.  There is an actual, built-in “Administrator” account that is disabled by default in modern Windows versions. If you enable this specific account and log into it, you run with full administrator privileges all the time, and the UAC prompts are suppressed. This is extremely dangerous and highly discouraged for everyday use because it brings back all the security risks of the older Windows versions. It’s essentially a break-glass-in-case-of-emergency account for advanced troubleshooting and should never be used as your day-to-day account.

The modern Windows approach, leveraging UAC, is about balancing convenience with security. It allows you to perform daily tasks safely with limited permissions, while still having the power available to make system-wide changes when you explicitly consent. It’s a clever system that ensures you are always in control of granting those powerful privileges, rather than having them constantly active. It might seem like a bit of a geeky distinction, but in a world of persistent online threats, it’s a vital one.

---

To view additional content, comment on articles, or submit a question of your own, visit my website at ItsGeekToMe.co (not .com!)