As we are well aware that only the admin, in Windows, is provided with full authority to perform any task: it may be installation of any software, or deletion/ creation of any file. User accounts or normal accounts need to be provided with administrative authority, to perform any important task. Now, if there are more than one admin and all are not allowed to perform all the tasks then, even admins have to enter the password or provide proper admin authentication.
In Windows Vista, 7 and 8 a new feature called User Account Control is provided, using which, only admins can provide permissions for making any modifications in the system. While installing any software or running any application you must have noticed a dialog box asking “Do you want to allow the following program to make changes to your computer”. This type of authentication is called Prompt for Consent. The user need not provide any password, but permission is to be provided by the administrative account only.
There is one more authentication called Prompt for Credentials in which admins need to provide permissions using password to make any changes to the system. Using Prompt for Credentials, only selective admins, who have been authorized can allow changes to occur.
Prompt for Credentials also checks incoming of the malwares and viruses in the system as only authorized admins are allowed to make changes to the system. Prompt for Credentials can be provided by using “gpedit”.
Steps to provide Prompt for Credentials:-
- Log on to the computer using administrator account.
- Go to the Start menu and type GPEDIT.MSC in search box.
- On the opened Local Group Policy editor snap-in, in the left pane, go to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.
- From the right pane, double-click User Account Control: Behaviour of the elevation prompt for administrators approval in Admin Approval Mode.
- On the opened box, from the available drop-down list, select Prompt for Credentials.
- Click OK to save the changes.
- Reboot your system to allow the changes to take effect.
Now even admins will be required to provide the passwords to perform any administrative tasks.