On Windows 10, User Account Control (UAC) is a security feature that blocks apps from making unwanted system changes, helps users to prevent accidental settings changes, and stops malware from getting into your system without your knowledge.
When UAC is enabled, if an app tries to make changes, Windows 10 will pop a security warning which the user must approve to allow the app to perform the task. If the user is using a standard account, then they’ll need to enter administrative credentials to run a particular task that requires higher privileges.
In short, User Account Control allows users to work in a more secure environment. However, there are some situations where you may want to disable, or configure the feature differently. For example, when you’re using legacy apps that were not designed to work in this type of environment, or you know exactly what you’re doing and prefer to run Windows 10 without this feature.
A guide on how to bypass 'This app has been blocked for your protection' in Windows 10. To solve this issue, run it in built-in administrator account.
If you want to make changes, or disable UAC completely, Windows 10 offers the necessary settings to prevent the User Access Control dialog from appearing every time a task needs elevation.
In this guide, you’ll learn the steps to manage User Account Control (UAC) settings on Windows 10.
In order to change User Account Control settings your account must be an account with administrator privileges. Otherwise, you’ll need to provide an administrator password to make changes.
Once you’ve completed the steps, restart your computer to apply the settings.
While it’s possible to change the User Account Control (UAC) settings on Windows 10, it’s always recommended to leave the default configuration for better security.
It’s important to note that there are ways to disable UAC using the Registry, but Standard users will experience unwanted behaviors, as such it’s not recommended to go that route.
If you want to disable the User Account Control feature (not recommended), you’ll need to change the account type to Administrator, and then follow the steps to select Never notify me when option using the slider.
Whether you like the User Account Control (UAC) feature in Windows Vista, 7 and 8 or not, the average computer user should always have it enabled. This is because there’s no doubt UAC is capable of blocking some actions by malware such as adding itself to global startup, dropping or modifying files located in Windows, installing rogue software processes and etc. There are certainly weaknesses in UAC, and there are ways to bypass UAC restrictions on a system, but not all malware is capable of doing that which is where UAC can work.
Unfortunately the effectiveness of UAC will probably diminish over time for many users because they mostly just end up pressing Yes to allow a program access without even looking at what is asking to run, because they’re presented with the prompt so often. Power users will no doubt find UAC extremely annoying and it’s the first thing that many of us disable after installing Windows. We usually have to keep UAC enabled on some of our test systems to simulate a normal user’s computer when doing research or testing software.
If you keep UAC enabled it can be quite annoying when you use a piece of software often and every time you run it, the UAC prompt appears. The program is perfectly safe, you’ve run it several times, and yet Windows keeps asking. Thankfully, there are ways around this problem to stop the UAC prompt from appearing for programs you specify and trust, here’s a selection of ways you can do it.
1. UAC PassUAC Pass is a small and portable executable that creates a UAC promptless shortcut on your desktop with drag and drop. When you double click the shortcut, it will launch your program and won’t popup the UAC prompt. This is made possible by adding the application to the Windows Task Scheduler automatically and then the shortcut simply starts the task with high privileges.
There are some preset options in UAC Pass that allow you to create a shortcut for different scenarios such as a USB drive, a startup entry or the desktop, and can pin to the Start Menu and Taskbar. You can also create a scheduled task that is started with Windows, allow multiple instances, create a batch file, force language and relative paths. For most situations the default preset should work just fine though.
To create the UAC bypass shortcut, all you have to do is drop a program or shortcut onto the window, and it will automatically create a scheduled task and then create the shortcut in the chosen location which will launch the task. To delete the shortcut, you can drag and drop it onto UAC Pass again to remove the program from Windows Task Scheduler and then manually delete the shortcut. Alternatively, just delete the shortcut and then go to the Windows Task Scheduler and delete the task. UAC Pass works in Windows Vista, Windows 7 and 8 32-bit and 64-bit.
Download UAC Pass
2. UAC Trust Shortcut
UAC Trust Shortcut allows you to disable User Account Control for a specific application, by defining a trusted shortcut. This program works slightly differently to UAC Pass because it doesn’t create a scheduled task and uses its own service to elevate the program. After installation, a UAC Trust Shortcut Tray Manager will be added to Windows startup which provides a convenient way for you to start the service and trusted shortcut creator.
To create a trusted shortcut, right click on the tray icon and select “Open UAC Trust Shortcut 1.0”. A window will appear where you can add the name of the program that you want to white list, browse for the program and click the Add now link. The trusted shortcut will be added to the Desktop and you can now run the program from the trusted shortcut without getting the UAC prompt. There is actually an additional step which you must perform first or else the trusted shortcut will always prompt the User Account Control warning.
You need to manually start the background service (tracer.exe) from the UAC Trust Shortcut Tray Manager (which requires UAC elevation) whenever you restart, or log off from your Windows session. You can launch as many trusted shortcuts you want without getting the UAC prompt while logged in. UAC Trust Shortcut doesn’t support command line arguments and doesn’t work with batch files. It works on Windows 7 32-bit and 64-bit. Make sure you download the correct version or else the setup will fail to install.
Download UAC Trust Shortcut 32-bit 64-bit
3. ElevatedShortcut
ElevatedShortcut is a program that’s quite similar in it’s operation to UAC Pass and allows you to create a Windows shortcut to elevate the privilege level of the program you’re trying to run so it doesn’t need the UAC prompt to appear. A Scheduled task is created with the “Run with highest privileges” option set, and the shortcut calls and runs the task.
ElevatedShortcut is a portable program and has separate version for Windows Vista and 7, and another for Windows 8 inside the zip file. Simply run the relevant executable and it will popup the main window where you have the choice of creating a new shortcut, modifying an existing shortcut or removing one you created previously. There’s also an option in Settings to add an entry into the Explorer context menu.
Clicking on a new shortcut will popup a new window where you locate the executable file, supply any optional command line arguments and a working directory if required. Then locate the folder where you want to place the shortcut and click the OK button. The Remove shortcut button will show you which scheduled tasks have been previously created along with the accompanying shortcuts, simply check the box to remove what you don;t want and click the button.
ElevatedShortcut
4. The Task Scheduler Trick
If you’re having issues with any of the tools that use the Task Scheduler shortcut to elevate the application, or would simply like to know how it’s done, you can always create a scheduled task yourself. It’s not difficult and only takes a minute or two to setup. Here are the steps on how to make a program run under the Task Scheduler with the highest privileges to bypass the UAC prompt.
1. Click the Start button and type Task Scheduler on the search programs and files bar and hit enter. Or go to Control Panel -> Administrative Tools -> Task Scheduler.
2. Click Action from the menu and select Create Task. Fill in the Name and Description boxes and then MAKE SURE to check the “Run with highest privileges” check box. This is the option which elevates the task to bypass the UAC prompt.
3. Go to the Actions tab and click the New button.
4. Make sure that “Start a program” option is selected and browse for the program that you want to run without a UAC prompt and click OK. Optionally you can also specify any command line arguments if required.
5. Now go to Settings tab and make sure that “Allow task to be run on demand” is selected which should already be enabled. Click the OK button to create the task and you should see the task being added to the Task Scheduler Library.
6. You can either manually run the program directly from Task Scheduler by right clicking on the task and select Run, or create a shortcut which is very useful when you want to put it in startup or just double click to open it quickly. To create a shortcut, right click on the Desktop and select New -> Shortcut. Type the following into the location box and click Next.
schtasks /run /TN '{Name of task}'
You will obviously need to change the task name in double quotes to the name of the task which you’ve used in step 2. Any name can be used for the shortcut and then click the Finish button. Whenever you need to run the program without the annoying UAC prompt, simply run the shortcut which has been created. You can even be place the shortcut in the Startup folder so that it runs with highest privileges without prompting you to allow the following program to make changes to the computer.
If you totally disable User Account Control, then you don’t need to use these methods, but it is good to know that there is a way to bypass the UAC restriction using different ways if needed. If you have UAC enabled and would like to keep it that way, or would like to allow another user access to a safe file without needing a prompt, then these tips could be useful if you need to run certain programs that require elevation when they startup.
Thanks a lot to the author of the article. Very good explanation especially the fourth option. As I didn’t wanted to use any utility program I went for fourth option, it worked for me. I’ve been looking for it for long time.
Replywhen i click to install it says user account control needs pass. its a collage pc and i cant install anythng
please help me with e mail.
ReplyTrying to create the shortcut but if I enter the location as schtasks/run/Logger32 I get an error message “The file schtasks/run/Logger32 cannot be found. But if I enter the exact same text into my Run window it launches the program just fine. What is missing????
Replyyou need to give absolute path, then it will do.
ReplyI used method 4 on Windows 10. Since it did not work, I want to undo what I have done, as other “strange ” things are now happening (which may or may not be related to what I did). So what are the steps to undo what I have done?
ReplyI can only warn you about UAC PASS:
it ruined my brandnew Win10x64 system.
The program apparently quietly accepts the ‘dragging’ of icons to the odd interface, will not pop up any information, nor show that icons have been successfully dropped, altered whatever.
There is NO information which programs are currently under its control.
It will NOT create any visible new(altered icons on the desktop, or entries in the Task Manager (Autostarts).
Yet it will AUTOMATICALLY start ALL ‘dropped’ apps at every Windows start, and you cannot stop this behavior! Meaning about 1/2 a dozen apps are now firing up whenever I start my Windows, WTF?!
Dropping the same icons AGAIN will not show reaction nor change, even a DEINSTALLATION and REINSTALLATION of the affected programs (e.g. WinZip) will let them autostart whenever Windows is booted.
For now I have not found any system hooks that this malicious UAC PASS tool has bent and broken.
As it is neither installed nor deinstalled officially it leaves invisible traces deep inside the registry that will never disappear. What puzzles me most is that NOTHING is added to AutoStarts, yet the programs fire up anyways.
Be VERY careful when playing around with this hack tool; it looks as weird as it works, I consider it a non-
removable virus. No malicious software remover will ever fix these defects.
I contacted the author, hoping for an explanation or solution, so far in vain.
All this because Windows 10 is still too stupid to allow a UAC control for individual EXE files, as ridiculuous as it sounds: All needed was a simple verification for any started EXE, checking if it matches the known/user granted credentials (file size, date, version, hash sum, whatever).
ReplyYou could use the registry editor to remove the traces left behind by the program. However, you could screw up your windows even more if you don’t now what you’re doing.
ReplyMy problem is I have a USB wireless adapter running off it’s own software. So each time I reboot, during the reboot section the popup occurs not because of the dongle but because of it’s software. I should point out this dongle works flawlessly because it runs exclusively on Linksys software and Windows10 can not get near or update it. Linksys actually recommends preloading the drivers so Win10 can’t bugger it up. A shortcut does not help since it is an autostart program. Any competent programmer would set a flag on the properties of the program to allow it to be bypassed but as we well know competence and Microsoft don’t share the same car. So, yes dear readers… UAC is now turned off. Honestly, how many versions of Windows have to get made where we turn off UAC before someone grows a brain at Microsoft and allows a ‘bypass’ option. Every virus checker does this without a problem.
ReplyUsing the Task Scheduler Trick works fine, but I’m not able to have the target open in a maximized window. Running Windows 10 here and tried -maximized, but doesn’t work. Suggestions
ReplyI like this neat professional program.
But, could it do one more thing:
I open execute a program by extention EXT association.
i.e. I call up Irfanview by clicking of a file that is associated with irfanview (e.g. jpg gif, etc).
Is there a way to make this work?
Thanks in advance.
By “this program” I means UAC Pass.
ReplyUAC is more than a notification service and should always be left enabled. When an administrator logs in to a windows machine, with UAC enabled, two access tokens are created, instead of one. A standard user access token and a full admin access token. Because of that, the user (administrator) is protected in many ways. A couple of them:
-Malicious software cannot be silently installed, as you will get a notification prompt.
-Embedded malicious code executed from within an application (ex. Powerpoint) won’t affect the system more than the standard access token permits.
Even if you exclude specific applications from the UAC protection, you put yourself at risk, because that application will run with elevated privileges… and I can think a couple of ways to manipulate that trust in order to execute a malicious code. To be honest, I would even recommend to raise UAC to the highest level, in order to prevent “trusted” windows applications from running with elevated privileges (like the task scheduler).
Even if you are a skilled systems Administrator, it is always a best practice to protect yourself from accidental mistakes. Personally, I always log in to my system with a standard user account and I set UAC to the highest level possible.
Lefteris Karafilis
ReplyWindows 7 Ultimate : Service Pack 1 : x64
I agree that UAC should never be turned off but on some occasions security and system protection can work against against us.
We use a third party backup application that starts at Windows startup and is scheduled to carry out security backups starting at 3:30pm each day.
Every morning, checks are made to ensure that the previous days backup was updated.
Some time back, following a W7 update, a Wednesday backup was not updated and showed file dates of the previous week.
On further investigation it was found that the backup application had suddenly started popping up a UAC prompt on startup. Because the computer is manually turned on and left to boot (while tea was made), no one had accepted the UAC prompt so the backup application start up was aborted.
Finding a way round the UAC prompt for this specific software took a while and a great deal of experimenting. The chosen method is quite close to [The Task Scheduler Trick] above but somewhat more complicated.
I shall try it later today and if it works on my system shall use it.
Thanks to All.
~MikeG~
RunAsRob is the solution
Thank you for sharing
ReplyWorked perfectly for me! – Thanks!
ReplyVery useful. Thanks lot.
ReplyI have 2 standard users (non admins) on my computer.
The trick works for one of them, and not the other. That is, for one account the command
schtasks /run /TN “{Name of task}”
will *not* prompt for UAC and launch the program.
For the other user though, the UAC prompt still pops up.
I have setup as task for each user and they each run their own, so that the task runs under the correct account (not the administrator account).
Does anyone have an explanation on why one account works fine and the other is still prompting ? Windows has always bewildered me in acting different in 2 similar situations…
Thanks
Replythank you!
i wonder if you might be able to help me with another issue i am experiencing. in order to circumvent the uac nags, i am running a batch file to simply ‘route print cmd /k’ via task scheduler and desktop shortcut but i want the DOS window to remain open and allow me to continue typing into it. when i execute the actual file, it runs as desired, however when it runs via task scheduler, the dos window closes immediately. to no avail, i have tried multiple things such as changing the ‘program/script’ field from C:locationbatchfilename.bat to just cmd and inputting the various arguments including cmd /k or /k or /k C:locationbatchfilename.bat to the task’s ‘add arguments’ field and/or the batch script itself. although i do not want pause as it would close the window after pressing any key, i have also tried it in the script itself and the arguments field but it too does not keep the dos window open when running as scheduled task. nothing seems to work – please help
ReplyDownload the free “RunAsROB” app, it’s the only thing I’ve ever had to use for UAC-related task & start-up automation: robotronic.de/runasroben.html
ReplyHi there’s also a tool called AppAvail UAC Launcher that seems to to the trick.
appavail.com/UAC.html
ReplyMerci beaucoup! Très utile!
ReplyAnother useful tool to bypass the UAC for a specific application is Runasrob.
You don’t have to start it after each restart and you can also start applications which need administrator rights from a non-administrator account.
Brian
Replythanks
ReplyWow! Really Cool , thanks for sharing :)
ReplyA better way is to elevate User Account Control without prompting. It leaves User Account Control enabled and tinkers just a bit with some of the settings of UAC instead of completely disabling the UAC function which disables the complete security feature in Windows 7 which is not a wise thing to do.
Press Windows + R, enter secpol.msc and hit enter
Click on Security Settings
Local Policies
Security Options
double-click User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
choose Elevate without prompting
click ok Star wars the clone wars senate guard.
This setting becomes immediately active. Test it by launching a program that prompted for allowance before. You will have no prompt now.
ReplyI’m using Windows 7 Home Premium 64-bit and I get “Windows cannot find secpol.msc”.
ReplyThat works on admin account only, not for standard account.
ReplyActually, it only works on Windows 7 Ultimate (and maybe Professional)
ReplyPeppino Peppino, Bravo Bravo! Exactly what I was looking for you. Gratzi! Gratzi!
ReplyPerfect! :)
ReplyTHAT FIX IS BEAUTIFUL! Thank you so much! Can it be made to work for a non-administrator account as well?
ReplyFinally something worked. THANK YOU!!!!!
ReplyThe service is not available in the Home Premium edition and is available only in the Professional and ultimate editions.”Deepak B”
ReplyProposed solution worked from in windows 8. Thanks lot.
ReplyThis “solution” does disable UAC completely for the selected account (in this case Administrator account). The same effect can by achieved by toggling the UAC setting to never show UAC prompts…
ReplyHow are your steps a way to “leave UAC enabled and tinkers a bit”?
Looks to me that it FULLY turns off UAC as soon as you pick “elevate without prompting”.
Is that true?
ReplyVery useful, Ray. Will probably use this. Earlier I had UAC disabled in the registry, but that caused some side-effects and was no ideal situation, so edited it back in the registry.
Reply