run gpedit.msc to open Group Policy Editor,then switch to
Computer Configuration---> Windows Settings---> Security Settings ---> Local Policies---> Security Options,
then enable
"User Account Control: Admin Approval Mode for the Built-in Administrator account", after all restart Windows to take effect.
