UAC Levels & Windows User Account Control Settings
Written by Owen Parry
Updated at July 27th, 2024
Table of Contents
When the AutoElevate agent is installed on a computer, it reads the UAC registry values that are currently set and reports the "UAC Levels" to the Admin Portal for you to evaluate.
This document maps out which values equate to which levels & what that means in terms of functionality in Windows. (See this Microsoft document for specific UAC information)
AutoElevate's "UAC Levels" correspond to the "Slider" positions in the "User Account Control Settings Screen".
Below is a full description of each level, followed by a section that outlines what Registry keys correspond to the different values found in the Admin Portal and what Registry keys get set when you use one of the UAC "Actions" on a Computer.
Windows User Account Control Settings - Slider Positions & Feature Descriptions
Administrator Slider Positions
Level 4
Level 3
Level 2
Level 1 (Off)
Standard User Slider Positions
Level 4
Level 3
Level 2
It cannot set for a Standard User
Level 1
It cannot be set for a Standard User
Admin Portal Grid Value to Registry Mapping
| Grid Values | Registry Keys |
| UAC Status - Off | EnableLUA = 0 |
| UAC Status - On (Dimmed) |
EnableLUA = 1
PromptOnSecureDesktop = 1 |
| UAC Status - On (Not Dimmed) |
EnableLUA = 1
PromptOnSecureDesktop = 0 |
|
UAC Status - On (Maximum)
UAC Admin Level - Level 4
UAC User Level - Level 4 |
EnableLUA = 1
PromptOnSecureDesktop = 1
ConsentPromptBehaviorAdmin = 1, 2, 3, OR 4
ConsentPromptBehaviorUser = 1 |
|
UAC Status - On (Dimmed) UAC Admin Level - Level 3 UAC User Level - Level 4 |
EnableLUA = 1 PromptOnSecureDesktop = 1 ConsentPromptBehaviorAdmin = 5 ConsentPromptBehaviorUser = 1 |
|
UAC Status - On (Not Dimmed) UAC Admin Level - Level 4 UAC User Level - Level 3 |
EnableLUA = 1 PromptOnSecureDesktop = 0 ConsentPromptBehaviorAdmin = 3 OR 4 ConsentPromptBehaviorUser = 3 |
|
UAC Status - On (Not Dimmed) UAC Admin Level - Level 2 UAC User Level - Level 3 |
EnableLUA = 1 PromptOnSecureDesktop = 0 ConsentPromptBehaviorAdmin = 5 ConsentPromptBehaviorUser = 3 |
|
UAC Status - On (Not Dimmed) UAC Admin Level - Level 1 (Off) UAC User Level - Level 3 |
EnableLUA = 1 PromptOnSecureDesktop = 0 ConsentPromptBehaviorAdmin = 0 ConsentPromptBehaviorUser = 3 |
Admin Portal Action to Registry Mapping
| Action | Registry Keys |
|
UAC Settings - Set to On (Not Dimmed) UAC Admin Level - Level 2 UAC User Level - Level 3 |
EnableLUA = 1 PromptOnSecureDesktop = 0 ConsentPromptBehaviorAdmin = 5 ConsentPromptBehaviorUser = 3 |
|
UAC Settings - Set to On (Dimmed) UAC Admin Level - Level 3 UAC User Level - Level 4 |
EnableLUA = 1 PromptOnSecureDesktop = 1 ConsentPromptBehaviorAdmin = 5 ConsentPromptBehaviorUser = 1 |
|
UAC Settings - Set to On (Maximum) UAC Admin Level - Level 4 UAC User Level - Level 4 |
EnableLUA = 1 PromptOnSecureDesktop = 1 ConsentPromptBehaviorAdmin = 2 ConsentPromptBehaviorUser = 1 |
| UAC Settings - Set to Off |
EnableLUA = 0 PromptOnSecureDesktop = 0 ConsentPromptBehaviorAdmin = 0 ConsentPromptBehaviorUser = 3 |