UAC

UAC is the Windows feature that prompts for consent before a program runs with administrator privileges, keeping everyday sessions at standard user rights. It raises the bar for malware, but it is a convenience boundary rather than a hard security boundary, and attackers use well-known UAC bypass techniques to elevate silently. Setting UAC to always notify and denying local admin rights altogether are stronger protections.