====== User account control under Windows Vista ======

{{template>vorlagen:tutorialdetails|tutname=Vista Benutzerkontensteuerung|tutautor=[[en:psycore]]|tutversion=1.0|tutquelle=tut:win:vista:uac}}

===== Introduction =====

The [[wpde>User_Account_Control|User Account Control]] under [[wpde>Microsoft Windows Vista|Windows Vista]] is an important security feature. It protects the system from unauthorised access through external attacks and malware. However, more experienced users may soon be annoyed by the constant requests from the OS.

There are a few tricks to customise it to your needs.

===== Automatic detection of an installation =====

If the user account control should automatically recognise whether an installation is being started and generally allow this, the following settings are required:

  * [[en:windows:essentials:regedit|Open Registry Editor]]

Navigate to the path:

<code reg>
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
</code>

Here we create a new value of the REG_DWORD data type:

<code reg>EnableInstallerDetection</code>

Allowed values are:

^ Value ^ Effect ^
| 0 | Switch off automatic detection |
| 1 | Automatic detection active |

===== Deactivate user account control for users =====

We open the registry editor as described in the first step and navigate to the path:

<code reg>
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
</code>

Here we create a new value of the REG_DWORD data type:

<code reg>ConsentPromptBehaviorUser</code>

Allowed values are:

^ Value ^ Effect ^
| 0 | Ignore request and deny rights |
| 1 | Activate request |

===== Deactivate user account control for admins =====

We open the registry editor as described in the first step and navigate to the path:

<code reg>
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
</code>

Here we create a new value of the REG_DWORD data type:

<code reg>ConsentPromptBehaviorAdmin</code>

Allowed values are:

^ Value ^ Effect ^
| 0 | Ignore request and assign rights |
| 1 | Activate request with confirmation and login |
| 2 | Activate request with confirmation |

===== Only allow digitally signed programmes =====

To allow only digitally signed programmes increased rights, the following entry must be made.

We open the registry editor as described in the first step and navigate to the path:

<code reg>
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
</code>

Here we create a new value of the REG_DWORD data type:

<code reg>ValidateAdminCodeSignatures</code>

Allowed values are:

^ Value ^ Effect ^
| 0 | PKI signing not required |
| 1 | PKI signing required |

===== Copyright and notes =====

© by [[en:psycore]] 2009

The author accepts no liability for any damage resulting from the use of this tutorial. This tutorial is written to the best of my knowledge and belief. The distribution of this tutorial is only permitted if the original text including copyright notice remains untouched.