How does User Account Control help to keep Windows Server secure?

What will be an ideal response?

User Account Control (UAC) is designed to keep the user running in the standard user mode as a way to more fully insulate the kernel, which runs in privileged mode, and to keep operating system and desktop files stabilized. UAC still allows standard user mode users to install software, but they must have the proper permissions to do so, and the installation still requires authorization from an administrator. Another element of UAC is the Administrator Approval Mode. For example, even though you are on the Administrator account when you run a typical program, Windows Server 2016 runs that program with standard user permissions in the standard user mode-insulating the operating system from extensive access. If the program needs to run in a mode as Administrator with more permissions and extensive access, the operating system displays a message box or prompt via UAC and you must respond.