UAC prompts Archives

Winsage

April 11, 2026

Announcing Windows 11 Insider Preview Build 26220.8165 (Beta Channel)

Windows 11 Insider Preview Build 26220.8165 (KB 5083635) has been released to the Beta Channel, featuring several updates: - The FAT32 volume formatting size limit has increased from 32GB to 2TB. - Performance improvements for navigating large volumes in Storage settings. - Reduced frequency of UAC prompts on the Storage page. - Resolution of unrealistic data usage values in Network settings. - Enhancements to the Windows Security app's Secure Boot experience, including color-coded icon badges and updated certificates. - A revamped Feedback Hub with a modernized experience, simpler feedback submission, easier navigation, a new compliment feedback type, and improved screenshot capture tools. - Updates are based on Windows 11, version 25H2, and features are gradually rolled out using Controlled Feature Rollout technology. - A desktop watermark appears in Insider pre-release builds. - Features may not be released beyond Windows Insiders and may evolve or be removed.

Winsage

April 2, 2026

Malwarebytes highlights Microsoft findings on WhatsApp attachments used in Windows attacks

A campaign targeting Windows users exploits WhatsApp attachments to execute a malicious .vbs script. Victims receive what appears to be a harmless attachment, which, when opened, duplicates legitimate Windows tools into a hidden folder and renames them to avoid detection. These tools are then used to download additional malware from reputable cloud services, disguising the malicious activity. The malware seeks administrator privileges by altering User Account Control settings and registry entries for persistence. It ultimately installs remote-access software and other payloads to maintain control over the compromised device. Malwarebytes recommends safety measures such as avoiding unsolicited attachments, enabling file extensions, using updated anti-malware tools, downloading software from official sites, being cautious of unexpected UAC prompts, and keeping systems updated.

Winsage

April 1, 2026

WhatsApp on Windows users targeted in new campaign, warns Microsoft

Microsoft researchers have identified a campaign that exploits WhatsApp attachments to infiltrate Windows machines, allowing attackers remote control. The attack uses social engineering tactics, where users receive a seemingly benign .vbs (Visual Basic Script) file that can be executed on Windows. This method does not rely on software vulnerabilities but on persuading victims to execute the malicious file. Attackers manipulate built-in Windows tools to download further malware, employing a technique known as living off the land (LOTL) to avoid detection. The malware seeks to elevate its privileges to administrator status, modifying User Account Control (UAC) prompts and registry settings for persistence. An unsigned MSI (Microsoft Installer) is deployed to establish remote-access software, granting continuous access to the compromised machine.

Winsage

February 17, 2026

Fix: UAC “Yes” Button Missing in Windows

The "User Account Control (UAC) Yes button missing" issue occurs when a user with a standard account attempts to authorize an action requiring administrator approval, resulting in the absence of the Yes button. To resolve this, the built-in Administrator account can be enabled by accessing Safe Mode and running the command PLACEHOLDER41726aa2dbf8cb10. After restarting, the user can log into the Administrator account, which has full privileges, and then grant administrator rights to their main account by using PLACEHOLDERd2270d55f540aab4 to change the group membership. After the main account is granted admin rights, the Yes button should appear in UAC prompts. It is recommended to disable the built-in Administrator account afterward for security by running net user administrator /active:no. If the device is managed by an organization, the user should contact their IT department for assistance. As a last resort for personal PCs, if no admin account is available, the user may need to reset or reinstall Windows after backing up important files.

Winsage

September 15, 2025

Overview of Windows Security Updates September 2025

In September 2025, Microsoft released 86 security updates, including 9 critical and 72 important patches, along with 5 patches for non-Microsoft issues. For Windows 10 version 22H2, the update (KB5065429) fixes UAC prompts for non-admin users and resolves a WinSock issue. Windows 11 versions 22H2 and 23H2 received similar updates (KB5065431) addressing the same UAC prompt issue and WinSock resolution. Windows 11 version 24H2 (KB5065426) resolves an input issue causing application unresponsiveness, a bug with IIS modules, and an NDI audio issue. Installing KB5063878 may cause audio stuttering in OBS Studio. Security advisory ADV 253991 offers guidance on Entra ID application authorization validation. Windows 10 will reach its end of life on October 14, 2025.

Winsage

September 10, 2025

Microsoft fixes app install issues caused by August Windows updates

Microsoft addressed a significant issue from the August 2025 security updates that led to unexpected User Account Control (UAC) prompts and installation challenges for non-administrative users across all versions of Windows. This issue arose from a security patch for the CVE-2025-50173 vulnerability, which posed a risk of privilege escalation for authenticated attackers. The updates affected various client and server platforms, including multiple versions of Windows 10 and Windows 11, as well as Windows Server 2025, 2022, and earlier versions. To mitigate these issues, the September 2025 Windows security update aims to reduce UAC prompts during MSI repairs, and IT administrators can disable UAC prompts for specific applications by adding them to an allowlist. UAC prompts will still be required for applications executing custom actions, but administrators can turn off these prompts for designated apps by adding new registry keys under HKEYLOCALMACHINESOFTWAREPoliciesMicrosoftWindowsInstaller. Additionally, Microsoft resolved another issue related to lag and stuttering problems with NDI streaming software on Windows 10 and Windows 11 systems.

Winsage

September 9, 2025

Windows 10 KB5065429 update includes 14 changes and fixes

Microsoft has released the KB5065429 cumulative update for Windows 10 22H2 and 21H2, which includes fourteen enhancements and fixes. This mandatory update addresses two zero-day vulnerabilities and 81 other flaws, improving the security of the operating system. Users can install the update through Windows Update, and it will automatically begin installation after checking for updates. The update upgrades Windows 10 22H2 to build 19045.6332 and Windows 10 21H2 to build 19044.6332. Key fixes include resolving unexpected User Account Control prompts, performance issues with NDI streaming software, and various other bug fixes related to input methods, app compatibility, multimedia, and search functionality. There are no known issues with this update.

Winsage

September 5, 2025

Windows August Patch Sparks Unexpected UAC Prompts, Blocking Non-Admin App Installs

In August 2025, Microsoft released security update KB5063878 to address a privilege escalation vulnerability, but it caused issues for standard Windows users, leading to unexpected prompts during routine tasks. Common scenarios affected include MSI repair operations, initial launches of specific Autodesk software, per-user application installations, Active Setup processes, and software deployed via Configuration Manager. Non-administrator commands like "msiexec /fu" may fail, and users setting up older programs like Office Professional Plus 2010 may see setup errors, specifically error 1730. Microsoft recommends using the "Run as administrator" option and advises IT teams to implement a Known Issue Rollback (KIR) policy. Disabling User Account Control (UAC) is discouraged, as it undermines the security enhancements of the update. Microsoft plans to release a future update to allow IT administrators to whitelist specific applications for repair operations without UAC prompts.

Winsage

September 5, 2025

Microsoft fesses up to Windows update that caused UAC prompts

Microsoft has acknowledged that the August 2025 security updates for Windows have caused unexpected User Account Control (UAC) prompts for users across all supported versions of Windows. The affected client versions include Windows 11 (24H2, 23H2, 22H2) and Windows 10 (22H2, 21H2, 1809, Enterprise LTSC 2019, Enterprise LTSC 2016, 1607, Enterprise 2015 LTSB). The server versions impacted are Windows Server 2025, 2022, 2019, 2016, 2012 R2, and 2012. The updates included a security enhancement (KB5063878) that enforced UAC prompts for administrator credentials during Windows Installer (MSI) repair operations to address the vulnerability CVE-2025-50173. Various scenarios can trigger UAC prompts for non-administrative users, including executing MSI repair commands, launching Autodesk applications, installing user-specific applications, and deploying packages via Configuration Manager. Standard users attempting to run applications that initiate MSI repair operations without a user interface may encounter errors, such as Error 1730 when trying to install Office Professional Plus 2010. Microsoft is working on a solution to allow IT administrators to permit specific applications to perform MSI repairs without triggering UAC prompts, which will be included in a future update. In the meantime, users are advised to run applications as administrators when possible, and IT admins can mitigate the issue by configuring a special Group Policy using Known Issue Rollback (KIR) for the affected Windows versions.

Winsage

September 5, 2025

Microsoft says recent Windows updates cause app install issues

Microsoft has acknowledged that the August 2025 security updates are causing unexpected User Account Control (UAC) prompts and installation challenges for non-administrative users across all supported Windows versions. This issue arises from a security patch addressing the CVE-2025-50173 vulnerability, which could allow authenticated attackers to escalate their privileges. New UAC prompts require administrative credentials in various scenarios, affecting standard users deploying packages via Configuration Manager and launching certain Autodesk applications. The affected platforms include Windows 11 (versions 24H2, 23H2, 22H2), Windows 10 (various versions), and several Windows Server versions. Microsoft stated that if a standard user runs an app triggering an MSI repair operation without a user interface, it will result in an error message, such as Error 1730 when installing Office Professional Plus 2010. Microsoft is working on a solution to allow specific applications to conduct MSI repairs without triggering UAC prompts and recommends running applications with administrative privileges as a temporary workaround. Additionally, Microsoft is addressing lag and stuttering issues with NDI streaming software on Windows 10 and 11, and clarified that there is no connection between the August 2025 update and reported SSD and HDD issues.