It can be done by changing local security policy running gpedit.msc on local machine or group policy management on domain controller if you need more global approach.
Computer Configuration> Windows Settings> Security Settings> Local Policies> Security Options
Enable "User Account Control: Admin Approval Mode for the Built-in Administrator account". Machine needs to be restarted.