I have no idea why it is not by default.Of course, finding this setting is a pain... you have to run secpol.msc (msc files open Microsoft's Management Console) and find the entry named User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Re: