Administrator Protection is a feature in Windows 11 that protects free-floating admin rights for Administrator users. This feature is currently available in the Windows Insider builds but will be available to all shortly. This article shows how to enable Administrator Protection in Windows 11 for a more secure UAC.
How to enable Administrator Protection in Windows 11
You can enable Administrator Protection in Windows 11 for a more secure UAC via the following two methods:
- Local Group Policy Editor
- Registry Editor
We will show you both of these methods here.
UAC stands for User Accounts Control. You all are aware of this built-in security feature of Windows 11. Whenever you launch an app with administrator rights, Windows 11 displays the UAC prompt with Yes and No options. Local Administrators can allow that app to make changes simply by clicking the Yes button. However, with the Administrator Protection feature enabled, the UAC screen will be replaced with Windows Security. Hence, this feature will become more secure.
1] Local Group Policy Editor
To enable the Administrator Protection feature through Local Group Policy Editor, you need to modify a policy setting. Windows 11 Home users can skip this method, as the Local Group Policy Editor is not available on Windows 11 Home edition.
Open the Local Group Policy Editor and go to the following path:
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
Now, scroll down and double-click on the “User Account Control: Configure type of Admin Approval Mode” option. Select the Admin Approval Mode with Administrator protection option in the drop-down. Click Apply and then click OK.
Exit the Local Group Policy Editor and restart your computer.
2] Registry Editor
Registry Editor is available on all editions of Windows, therefore, Windows 11 Home users can also use this method. Before you proceed, we recommend you create a system restore point and backup your Registry, so you can restore your system if any problem occurs.
Open the Registry Editor, copy the following path, and paste it into the address bar of the Registry Editor. Hit Enter after that.
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Make sure that you have selected the System key on the left side. Now, look for the TypeOfAdminApprovalMode entry on the right side. If the entry does not exist, create it manually.
Right-click in the empty space on the right side and select New > DWORD (32-bit) Value. Give the name TypeOfAdminApprovalMode to this newly created value. Now, double-click on this value and enter 2 in its Value data. Restart your computer for the changes to take effect.
If you want to revert changes, change the Value data of TypeOfAdminApprovalMode from 2 to 1 in Registry and save the changes.
That’s it.
How do I always give administrator permission in Windows 11?
To open an application as an administrator in Windows 11/10, right-click on it and select Run as Administrator. You need to do this every time you want to launch the application as an administrator. However, an alternate option for this is to make that application always Run as administrator without selecting the respective option in the right-click context menu.
How to enable an admin account?
In Windows 11/10, you can create different types of accounts, including a local account, an administrator account, etc. In addition to these accounts, Windows 11/10 also has a hidden super administrator account. This account is usually used to troubleshoot and fix issues. You can enable the built-in Administrator account through the Command Prompt.
Read next: How to set up a Passwordless User Account on Windows.
