Why You Really Need to Stop Disabling UAC

The article explains how Windows UAC (including Admin Approval Mode) strengthens endpoint security by gating admin actions and enabling the Mark of the Web and SmartScreen protections. It warns that disabling UAC also disables MoTW, which can allow malicious Office macros to run without prompts, easing phishing-based initial access. The author recommends keeping UAC, SmartScreen, and macro-blocking policies enabled and centrally enforcing them via GPO/Intune to harden environments.