From 6c4c4558332f036c3c6339637e185706b47c2e60 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 18 Apr 2016 09:44:11 -0700 Subject: [PATCH 1/2] add /all to dism command --- windows/keep-secure/credential-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/keep-secure/credential-guard.md b/windows/keep-secure/credential-guard.md index 611a173709..387655a9a5 100644 --- a/windows/keep-secure/credential-guard.md +++ b/windows/keep-secure/credential-guard.md @@ -180,7 +180,7 @@ First, you must add the virtualization-based security features. You can do this 2. Add the Hyper-V Hypervisor by running the following command: ``` syntax - dism /image: /Enable-Feature /FeatureName:Microsoft-Hyper-V-Hypervisor + dism /image: /Enable-Feature /FeatureName:Microsoft-Hyper-V-Hypervisor /all ``` 3. Add Isolated User Mode by running the following command: From ab0bae469037c5d226b71ddea5bdf38e01c9b62c Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Mon, 18 Apr 2016 15:59:07 -0700 Subject: [PATCH 2/2] VSO# 6982476 --- windows/whats-new/user-account-control.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/windows/whats-new/user-account-control.md b/windows/whats-new/user-account-control.md index 464a0a7af3..42b4c473fa 100644 --- a/windows/whats-new/user-account-control.md +++ b/windows/whats-new/user-account-control.md @@ -17,6 +17,10 @@ author: brianlic-msft User Account Control (UAC) helps prevent malware from damaging a computer and helps organizations deploy a better-managed desktop environment. +You should not turn off UAC because this is not a supported scenario for devices running Windows 10. If you do turn off UAC, all Univeral Windows Platform apps stop working. You must always set the **HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA** registry value to 1. If you need to provide auto elevation for programmatic access or installation, you could set the **HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ConsentPromptBehaviorAdmin** registry value to 0, which is the same as setting the UAC slider Never Notify. This is not recommended for devices running Windows 10. + +For more info about how manage UAC, see [UAC Group Policy Settings and Registry Key Settings](https://technet.microsoft.com/library/dd835564.aspx#BKMK_AdminApprovalMode). + In Windows 10, User Account Control has added some improvements. ## New features in Windows 10