UAC prompt does not appear when installing software on one PC (Windows 11 23H2)

Question

Hi,

On one client PC, the UAC credential prompt never appears when the logged-in standard user tries to install a program or use "Run as administrator". Nothing happens, so IT cannot enter the admin username and password to install software.

If we change the user account to Administrator, programs install normally, so the installers are not the problem. However, changing the account type every time is not practical. We want the user to stay a standard user and have IT enter admin credentials in the UAC prompt.

Other PCs in our office work normally. The problem happens both when IT connects remotely and when IT is sitting in front of the PC.

Environment:

• Windows 11, version 23H2
• The logged-in user is a standard user

Registry values under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System are default:

• EnableLUA = 1
• ConsentPromptBehaviorAdmin = 5
• ConsentPromptBehaviorUser = 3
• PromptOnSecureDesktop = 1

Questions:

1. What could prevent the UAC credential prompt from appearing for a standard user on this PC only?
2. How can we fix it so IT can enter admin credentials without changing the user's account type?

Thank you.

Answer 1

Hello @IT_BKK

The listed registry values should allow a standard user to enter administrator credentials. ConsentPromptBehaviorUser=3 means Prompt for credentials, while PromptOnSecureDesktop=1 displays the prompt on the secure desktop.

Because only one PC is affected, check the effective policy rather than registry values alone:

gpresult /h C:\Windows\Temp\gpresult.html

Review:

Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > User Account Control: Behavior of the elevation prompt for standard users

It must be Prompt for credentials or Prompt for credentials on the secure desktop. If it’s Automatically deny elevation requests, Windows denies standard-user elevation without displaying a credential prompt.

Also verify that the Application Information service hasn’t been disabled:

Get-Service Appinfo

Windows Installer can use this service to request administrative authorization for an elevated installation.

Test elevation independently of the installer:

Start-Process powershell.exe -Verb RunAs

If this also produces no prompt, the issue is UAC policy, the Application Information service, or endpoint-security software, not the installer. If Group Policy or Intune manages the setting, correct it there and refresh the policy rather than editing the registry locally. Don’t disable UAC or make the user a permanent local administrator.

References:

Microsoft UAC policy reference

Microsoft policy documentation

Using Windows Installer with UAC

---

Help make this community better for everyone: If this answer helped or resolved your issue, please accept it or upvote it. If not, share more details in a comment so we can continue the discussion and find the right solution. Thank you.