deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-20 04:43:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

added slider table

Browse Source
This commit is contained in:
Justin Hall
2018-09-19 10:15:01 -07:00
parent e6ace9f86f
commit 0af8eccb26
1 changed files with 71 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

100
windows/security/identity-protection/user-account-control/how-user-account-control-works.md
View File

@ -7,7 +7,7 @@ ms.mktglfcycl: operate
ms.sitesec: library
ms.pagetype: security
author: brianlic-msft
ms.date: 04/19/2017
ms.date: 09/19/2018
---
# How User Account Control works
@ -156,37 +156,79 @@ To better understand each component, review the table below:
<p>Check UAC slider level</p>
</td>
<td>
<p>UAC has four levels of notification to choose from and a slider to use to select the notification level:</p>
<ul>
<li>
<p><b>Always Notify</b></p>
<p>If the slider is set to <b>Always notify</b>, the system will notify you when programs try to install software or make changes to your computer.</p>
</li>
<li>
<p>Medium</p>
<p>If the slider is set to <b>Notify me only when programs try to make changes to my computer</b>, the <b>User Account Control: Only elevate executable files that are signed and validated</b> policy setting is checked:</p>
<ul>
<li>
<p>If the policy setting is enabled, the public key infrastructure (PKI) certification path validation is enforced for a given file before it is permitted to run.</p>
</li>
<li>
<p>If the policy setting is not enabled (default), the PKI certification path validation is not enforced before a given file is permitted to run. The <b>User Account Control: Switch to the secure desktop when prompting for elevation</b> Group Policy setting is checked.</p>
</li>
<p>UAC has a slider to select from four levels of notification.</p>
<table>
<tr>
<th>Level</th>
<th>Notification</th>
<th>Secure desktop</th>
<th>Recommendation</th>
</tr>
<tr>
<td>
<p><b>Always notify</b></p>
</td>
<td>
<ul><li>Notify you when programs try to install software or make changes to your computer.</li>
<li>Notify you when you make changes to Windows settings.</li>
</ul>
</li>
<li>
<p>Low</p>
<p>If the slider is set to <b>Notify me only when apps try to make changes to my computer (do not dim by desktop)</b>, the CreateProcess is called.</p>
</li>
<li>
<p>Never Notify</p>
<p>If the slider is set to <b>Never notify me when</b>, UAC prompt will never notify when an app is trying to install or trying to make any change on the computer.</p>
<div class="alert"><b>Important</b>  <p class="note">This setting is not recommended. This setting is the same as setting the <b>User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode</b> policy setting to <b>Elevate without prompting</b>.</p>
</div>
<div> </div>
</li>
</td>
<td>
<p>Freeze other tasks until you respond.</p>
</td>
<td>
<p>Recommended if you often install new software or visit unfamiliar websites.</p>
</td>
</tr>
<tr>
<td>
<p><b>Notify me only when programs try to make changes to my computer</b></p>
</td>
<td>
<ul><li>Notifies you when programs try to install software or make changes to your computer.</li>
<li>Doesn't notify you when you make changes to Windows settings.</li>
</ul>
</td>
<td>
<p>Freezes other tasks until you respond.</p>
</td>
<td>
<p>Recommended if you do not often install apps or visit unfamiliar websites.</p>
</td>
</tr>
<tr>
<td>
<p><b>Notify me only when programs try to make changes to my computer (do not dim my desktop)</b></p>
</td>
<td>
<ul><li>Notifies you when programs try to install software or make changes to your computer.</li>
<li>Doesn't notify you when you make changes to Windows settings.</li>
</ul>
</td>
<td>
<p>Doesn't freeze other tasks or wait for a response.</p>
</td>
<td>
<p>Not recommended. Choose this only if it takes a long time to dim the desktop on your computer.</p>
</td>
</tr>
<tr>
<td>
<p><b>Never notify (Disable UAC)</b></p>
</td>
<td>
<ul><li>Doesn't notify you when programs try to install software or make changes to your computer.</li>
<li>Doesn't notify you when you make changes to Windows settings.</li>
</ul>
</td>
<td>
<p>Doesn't freeze other tasks or wait for a response.</p>
</td>
<td>
<p>Not recommended due to security concerns.</p>
</td>
</tr>
</td>
</tr>
<tr>
<td>