Additionally, just remembered, recently there is an additional option on Windows 11 that the UAC generates a temporary admin user and then throws the security token away.

https://blogs.windows.com/windowsdeveloper/2025/05/19/enhanc...