Friday, September 5th 2025
Windows August Patch Sparks Unexpected UAC Prompts, Blocking Non-Admin App Installs
Microsoft's August 2025 security update (KB5063878) was intended to address a serious privilege escalation flaw, but it has inadvertently created new headaches for standard Windows users. Instead of quietly tightening User Account Control (UAC) as intended, the patch now forces non-admin accounts to deal with unexpected prompts whenever certain actions are performed. According to Microsoft, the problem can occur in several everyday scenarios, including MSI repair operations, first-time launches of certain Autodesk software, per-user app installations, Active Setup, and even software deployed through Configuration Manager that relies on user-specific settings. In some cases, commands like "msiexec /fu" fail outright for non-administrators, and older programs, such as Office Professional Plus 2010, can break during setup with error 1730.
Until a permanent fix is available, Microsoft is offering several temporary workarounds. Regular users can try running apps with "Run as administrator" when possible. At the same time, IT teams in larger organizations are encouraged to implement a Known Issue Rollback (KIR) policy provided by Microsoft Support to suppress the buggy prompts. The company cautions against disabling UAC altogether, since that would undo the security protections the patch was meant to enforce. Instead, administrators should review per-user software deployments and coordinate with vendors to avoid compatibility issues. Microsoft has promised a future update that will allow IT admins to whitelist specific applications for repair operations without triggering UAC; however, for now, users will need to work around the stricter checks.
Sources:
Microsoft, via Tom's Hardware
Until a permanent fix is available, Microsoft is offering several temporary workarounds. Regular users can try running apps with "Run as administrator" when possible. At the same time, IT teams in larger organizations are encouraged to implement a Known Issue Rollback (KIR) policy provided by Microsoft Support to suppress the buggy prompts. The company cautions against disabling UAC altogether, since that would undo the security protections the patch was meant to enforce. Instead, administrators should review per-user software deployments and coordinate with vendors to avoid compatibility issues. Microsoft has promised a future update that will allow IT admins to whitelist specific applications for repair operations without triggering UAC; however, for now, users will need to work around the stricter checks.

28 Comments on Windows August Patch Sparks Unexpected UAC Prompts, Blocking Non-Admin App Installs
Edit: had to check and turns out one of my photo editing tool has native Linux support and might have to change my workflow around Corel as they also have native Linux softwares. So atleast I am not out of options in future.
These broken updates really make me want to switch over to Linux completely, W11 is breaking SSD's, and it's not worth signing into an MS account for a year of W10 updates.
--
It never felt so nice to not use windows and to have w11 pro updates "paused".
--
I appreciate when techpowerup will also finally join in the club like other german language based websites which report regularly on windows 10 or windows 11 issues.
I read such topic at least one per month average. The issues are important. Especially data storage corruption, printer issues, ....
I only miss a summary webpage which lists all microsoft screwup with cross links for those issues to read further.
--
Some devices never get updates and just work. Some operating system from worm just worked for years for myself. I wonder where was the difference?
When you pay bananas you get monkey quality? (how dare i /sarcasm)A warning from a long term user.
Gnu gentoo linux shipped recently faulty linux firmware. The graphical user interface was broken. Around 6 days later, much later when i blocked that package, they fixed it.
Linux kernel is more flawless. But the stuff around it which people wrongly name linux will have issues. These will incraese. I see the issues increase in past months.
When you want to game or use newest software you will run more likely into it. ""Linux"" is not flawless = Gnu userspace around the linux kernel is not flawless.
You need patience to keep gentoo since 2006 alive. Today I had to read news and I have to implement a change soon as a core component is updated. A new core mechanism for those fancy graphical user interfaces which i most likely never will be using.The windows 10 problems / w11 problems are real. It is not clickbait. Pages hardly report about it. Long term issues were with USB, intel graphics, .... regardless of the cpu, mainboard, mainboard board vendor. that includes the chipset also of the mainboard.
MS has been breaking so much stuff, pushing too much bloat and AI, I may try Bazzite or PopOS next on my main system. I can accept the issues with games or might just deal with it, some games seem to run as well or better than Windows but varies a lot.
Also not to say Linux is perfect by any means, and it will probably have more issues arise if the share of users keeps increasing, but it's nice to not have forced updates or be concerned about the OS with it corrupting data or breaking hardware. Linux is also much more performant to me, no random slowdowns or lag in the OS as I've noticed happens in W11.And? Microsoft could have W11 on a billion PC's, yet they still manage to screw up their updates.Clearly not well enough, given all of the news with updates causing issues, some of them very serious like data corruption or hardware failure.Just because it works for you doesn't mean it does for everyone or to ignore the glaringly bad problems with W11 that are happening, it isn't clickbait at all.
I've had awful experiences from forced updates with Windows 10, multiple times where the update corrupted Windows so much that you couldn't even boot into safe mode for a system restore. I've also had odd issues with a couple of updates at work with my computer that runs Windows 10. They are out there. And because of my issues I've switched over to Windows 10 Pro at home and put a kibosh on allowing Windows 10 to run updates.
When I feel I need an update, I'll do a clean install when I'm ready for it, not when Windows decides to shit the bed and corrupt everything because it failed to update.
Using a 3rd party anti-virus makes no difference. It breaks.
If Microsoft wants to drive all music production off the PC they are doing a pretty good job of it.
In case you were wondering, RPTMIdi is the driver that allows midi over either-net.
Either-net is superior to USB for midi.
Missing this hardware config is a huge oversight.
If they were to clean sheet Windows 11, or 12, or whatever, it would be a disaster. There is decades of legacy code that MS has no clue how to fix. It's why we're still limited to 15 character names in 11, with no symbols or special characters, because of a NetBIOS limitation from the early 90s. Any attempt to change that code for naming just breaks windows and AD integration completely. The only way you could do it would be to totally drop any pretense of backwards compatibility, but doing so would be a death knell for Windows itself, as any dev that has to recompile everything is going to target all platforms, not just Win32 anymore.I thought music production was firmly in the Apple camp.
Remember the apple and PC commerical are you sure you want to install this YES are you sure you want to do that YES.
Everyone hits YES anyway. Most stupid feature ever Windows and MS came up with.
I keep hoping that IBM or Oracle will deliver a Windows compatible OS. (unlikely, but I can dream.)
When will they learn?
I can't wait to see what junk and bloated spyware Windows 12 has in store for us all.
Anyone experienced with AI ll recognize this pattern, initially AI performs exceptionally well but over time it starts to fail more often.
Then In situations where rookie humans break things instead of fixing them, AI might remove elements instead of resolving issues leading to unexpected results.
However the way you have configured it, UAC is still enabled, so you still have elevated and non elevated processed, but you have disabled approval prompts, so everything that requests elevation is auto elevated.
I spent quite a lot time yesterday trying to delete folders which are doubles (exact same name) and moving files that are or aren't there..
I have multiple machines, desktops and laptops and all of them have been working fine since they were bought, some that went through W8-10-11 with hardware changes along the way.
Apart from some BSODs from a shitty Asus driver on an older Zenbook, everything has been working flawlessly no matter what junk I've installed or did on them.