question

AleBlinka-8032 avatar image
0 Votes"
AleBlinka-8032 asked frx-1551 edited

How to change order of accounts in UAC

Hello

I have a laptop with Windows 10 joined to domain, when I can logon with password or virtual smart card. If I run something as administrator and UAC appears, I can see accounts in this order:


  1. domain accounts with passwords

  2. domain accounts with virtual smart cards

  3. local accounts with passwords

Would you know how to change this order?

123859-2021-08-17-17h09-00.png


windows-10-setup
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I also have this question.

0 Votes 0 ·

1 Answer

kiranbl-0540 avatar image
0 Votes"
kiranbl-0540 answered frx-1551 edited

There seems to be no explicit setting/registry value for the default admin user that is being shown in the UAC dialog (the consent.exe process).

However, the order in which the admin accounts are displayed is quite simple: it's alphabetically.

The first alphabetically sorted account will be the default account the UAC dialog asks the password for. The accounts are sorted by username, not by display name.

So if e.g. you create an administrator account named Admin, it will be chosen by UAC over the Administrator account.

I hope this answer help you, Please click on "ACCEPTED ANSWER" if it helps.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@kiranbl-0540 How do you choose default account? Which part of the username is it sorting, the device name/domain or after the \? Is the email a username or the name above that?

This doesn't match my experience. I have two users, one that is a regular user that starts with z (I'll call it z username) (after the ) and one that is an administrator that starts with P (I'll call it P username). If I open the task manager as regular user (the z username) the prompt will list and prompt for the z username instead of the administrator P username so I need to keep on clicking more choices to then select and enter the password for the P username. It seems random because sometimes after enough times over several different applications, the P username is prompted first, but that doesn't seem to stick because then the next or next couple of UAC prompts will have the z username prompted first.

Also, if it was the case that the username was sorted alphabetically, then how come at least sikula isn't below _testovic in the screenshot.

0 Votes 0 ·

@kiranbl-0540 (sorry for all the mentions, trying to make a reply but made separate message) The scenario I previously described is when I was logged in as the regular z username, don't tell me to run as the administrator P username, although it probably will have prompt priority since it would be logged in as that user, because that defeats the purpose of using a regular user. It seems when I run something like netplwiz or msconfig via start menu, it will prompt for the P username first, but when I run something like Task Manager or Device Manager or Task Scheduler the z username is prompted first. Running Task Manager or Device Manager as administrator via the right click context menu in either start menu or task bar doesn't change prompt priority (I couldn't test Device Manager entry running as administrator as it doesn't allow run as administrator context menu in start menu or pinning to task bar (I think it can be done, but the amount of effort for this redundant finding is not worth it)). In case it matters the z username is just part of the Users group and the P username is just part of the Administrators group (at least looking at group membership via netplwiz. net use for each user shows the same where z username is part of local group membership *Users and *None global group membership and the P username is part of *Administrators local group membership and *None global group membership.

Output of whoami /groups for z username: https://pastebin.com/zEXHYZeY
Output of whoami /groups for P username: https://pastebin.com/KEdnkbhj

0 Votes 0 ·