Does enabling UAC and setting the Admin approval behavior to Elevate without prompting provide any form of extra security to Administrator account. Note that my use case is for a Kiosk application where user interaction in Admin mode is very less.
It is a bad idea, if you checkout the documentation here
Elevate without prompting. Allows privileged accounts to perform an operation that requires elevation without requiring consent or credentials.
note: Use this option only in the most constrained environments.
This is just notify the administrator execution attempts, it doesn't stop the program from execution. It is worst than the basic UAC that prompt for user consent.
UAC was implemented as a way to control who installed software on a device and not really as a security measure. It's more of a management solution than a security solution.
WRT the Administrator account: that should be used only sparingly. A more secure solution to that would be to rename the account and then disable it, then create other Administrator-level accounts for specific users.
I would recommend setting the UAC setting to maximum despite the fact that Microsoft does not treat it as a security boundary as this can often prevent privilege escalation from administrator to system privileges. However, if this isn't a concern, I can't imagine why you would ask an infosec forum this question at all.
User Account Control is disabled on the built-in Administrator account (this is not the same as elevate without prompt) by default. As such, it would not provide its features
If you turn on Admin Approval Mode for the built-in Administrator account, then it will provide its features.
Please remember, User Account Control is not a security boundary, and one should not solely rely on it.
UAC is not security. UAC is a protection against user miss-use.
For an administrator, UAC is just the 1st thing that is being turned off after installing a recent Windows OS. That is why some prefer to use the built-in Administrator account, as it has no such restrictions.
For the normal average non-IT users, it can help protect them from doing wrong things, but in a pretty limited manner.
So it should be left on for normal users and turned off for experienced admins.
As for the additional protection it may offer against malware it does not help much because un-aware users that clicked on something most of the time will click to continue also. It does indeed help against some automated deployment of malware.