Changes in User Account Control

Applies To: Windows 7, Windows Server 2008 R2

This product evaluation article written for the IT professional describes the changes for User Account Control (UAC) in Windows 7 and Windows Server 2008 R2.

Changes in User Account Control

The improvements to UAC in Windows 7 and Windows Server 2008 R2 result in an improved user experience when configuring and troubleshooting your computer. Improvements in UAC functionality include:

  • Increase the number of tasks that the standard user can perform that do not prompt for administrator approval.

  • Allow a user with administrator privileges to configure the UAC experience in the Control Panel.

  • Provide additional local security policies that enable a local administrator to change the behavior of the UAC messages for local administrators in Admin Approval Mode.

  • Provide additional local security policies that enable a local administrator to change the behavior of the UAC messages for standard users.

For more information about these improvements, see What's New in User Account Control. For information about configuring UAC, see User Account Control Step-by-Step Guide.

Reduced number of UAC prompts

The default UAC setting allows a standard user to perform the following tasks without receiving a UAC prompt:

  • Install updates from Windows Update.

  • Install drivers from Windows Update or included with the operating system.

  • View Windows settings. (However, a standard user is prompted for elevated privileges when changing Windows settings.)

  • Pair Bluetooth devices to the computer.

  • Reset the network adapter and perform other network diagnostic and repair tasks.

The following table lists the likelihood of UAC prompts for user actions in comparison to Windows Vista SP1.

Actions Only notify me when programs try to make changes to my computer Always notify me

Change personalization settings

No prompts

Fewer prompts

Manage your desktop

No prompts

Fewer prompts

Set up and troubleshoot your network

No prompts

Fewer prompts

Use Windows Easy Transfer

Fewer prompts

Same number of prompts

Install ActiveX controls through Internet Explorer

Fewer prompts

Fewer prompts

Connect devices

No prompts

No prompts if drivers are on Windows Update, or similar number of prompts if drivers are not on Windows Update

Use Windows Update

No prompts

No prompts

Set up backups

No prompts

Same number of prompts

Install or remove software

No prompts

Fewer prompts

Changes in UAC administration

Changes to administer UAC include:

  • The UAC experience can be configured in Control Panel, and four levels of notification are available.

  • The behavior of UAC messages for administrators and standard users can be changed in local security policies.

  • The ActiveX Installer Service allows enterprises to manage the deployment of ActiveX controls through Group Policy.