How to Enable/Disable Administrator Protection for Admin Approval Mode in Windows 11?

Multiple Methods to Enable/Disable Administrator Protection for Admin Approval Mode in Windows 11 PC!

Arjun Das 2 weeks agoLast Updated: December 5, 2024

0 18 3 minutes read

Windows 11 includes advanced security features like Admin Approval Mode, which adds an extra layer of protection for administrators. When enabled, this mode prompts for approval before allowing administrative tasks, ensuring greater control over critical system changes. This tutorial explains how to enable or disable Administrator Protection for Admin Approval Mode using multiple methods.

Admin Approval Mode is a security feature in Windows that applies an additional layer of authentication for administrator accounts. When turned on, it requires explicit approval before executing tasks that require administrative privileges, reducing the risk of unauthorized system changes.

Why Enable or Disable Administrator Protection for Admin Approval Mode?

Enabling Administrator Protection ensures that even administrators have to confirm critical actions, increasing security. Disabling it may be preferred in controlled environments where additional prompts may disrupt workflows.

Method 1: Using Local Security Policy

The Local Security Policy is a straightforward way to configure Admin Approval Mode. Here’s how:

Open Local Security Policy by typing secpol.msc in the Windows search bar and pressing Enter.

Navigate to Local Policies > Security Options in the left pane.

Locate the policy titled User Account Control: Admin Approval Mode for the Built-in Administrator Account.
Double-click the policy to open its properties.
To enable Administrator Protection, select Enabled. To disable it, choose Disabled.
Click Apply and then OK to save changes.
Restart your computer for the changes to take effect.

Method 2: Using Group Policy Editor

For systems with access to the Group Policy Editor, you can enable or disable Admin Approval Mode with the following steps:

Press Winkey + R, type gpedit.msc, and press Enter.

Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

Choose Security options from the GP Editor

Find the policy named User Account Control: Run all administrators in Admin Approval Mode.

Choose the UAC: Admin Approval Mode for the Built-in Admin Account

Double-click the policy to open its settings.
Select Enabled to turn on Admin Approval Mode or Disabled to turn it off.
Click Apply and OK to confirm changes.

Restart your system to implement the changes.

Method 3: Using Registry Editor

Important: Back up the registry before making any changes to avoid potential system issues.

For advanced users, the Registry Editor provides another method to modify Admin Approval Mode:

Open the Registry Editor by pressing Winkey + R, typing regedit, and pressing Enter.

Navigate to the following path:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Locate the EnableLUA key. If it doesn’t exist, create a new DWORD (32-bit) Value with the name EnableLUA.

Enabling or Disabling UAC Admin Approval mode using registry editor

Set the value to:
- 1 to enable Admin Approval Mode.
- 0 to disable it.
Close the Registry Editor and restart your computer for the changes to take effect.

Method 4: Using PowerShell

For users comfortable with command-line tools, PowerShell offers a quick way to enable or disable Admin Approval Mode:

Open PowerShell as Administrator by right-clicking the Start button and selecting Windows Terminal (Admin).

To enable Admin Approval Mode, enter the following command:
- Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name EnableLUA -Value 1

To disable Admin Approval Mode, enter:
- Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name EnableLUA -Value 0

Restart your computer to apply the changes.

Method 5: Using Command Prompt

You can also use the Command Prompt to enable or disable Admin Approval Mode:

Open Command Prompt as Administrator by typing cmd in the search bar, right-clicking it, and selecting Run as administrator.

Open Command Prompt using Run as Administrator

To enable Admin Approval Mode, type:
- reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f

Command prompt command to turn on UAC Admin Approval

To disable Admin Approval Mode, type:
- reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f

Command prompt command to turn off UAC Admin Approval

Restart your system for the changes to take effect.

Conclusion

Admin Approval Mode in Windows 11 provides an extra layer of security for administrator accounts, ensuring critical tasks are performed only with explicit consent. By following any of the methods above, you can easily enable or disable this feature based on your needs. From the Local Security Policy to PowerShell, each method is designed to offer flexibility and control over your system’s security settings.

FAQ:

What happens if I disable Admin Approval Mode?

Disabling this mode removes the extra layer of confirmation for administrative tasks, which may reduce security but streamline workflows in trusted environments.