deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-22 05:43:41 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Applied note styles and corrected table header cells

Browse Source
This commit is contained in:
Gary Moore
2020-10-22 15:04:34 -07:00
committed by GitHub
parent 26f39a190e
commit 813ca87003
1 changed files with 15 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
windows/security/identity-protection/user-account-control/how-user-account-control-works.md
View File

@ -109,9 +109,7 @@ To better understand each component, review the table below:
<th>Description</th>
</tr>
<tr>
<td>
<p><b>User</b></p>
</td>
<th colspan="2">User</th>
</tr>
<tr>
<td>
@ -138,9 +136,7 @@ To better understand each component, review the table below:
</td>
</tr>
<tr>
<td>
<p><b>System</b></p>
</td>
<th colspan="2">System</th>
</tr>
<tr>
<td>
@ -248,8 +244,7 @@ To better understand each component, review the table below:
</td>
</tr>
<tr>
<td>
<p><b>Kernel</b></p>
<th colspan="2">Kernel</th>
</td>
</tr>
<tr>
@ -276,9 +271,11 @@ The slider will never turn UAC completely off. If you set it to <b>Never notify<
- Cause all elevation request initiated by administrators to be auto-approved without showing a UAC prompt.
- Automatically deny all elevation requests for standard users.
> **Important:** In order to fully disable UAC you must disable the policy **User Account Control: Run all administrators in Admin Approval Mode**.
>
> **Warning:** Some Universal Windows Platform apps may not work when UAC is disabled.
> [!IMPORTANT]
> In order to fully disable UAC you must disable the policy **User Account Control: Run all administrators in Admin Approval Mode**.
> [!WARNING]
> Some Universal Windows Platform apps may not work when UAC is disabled.
### Virtualization
@ -291,7 +288,9 @@ Most app tasks operate properly by using virtualization features. Although virtu
Virtualization is not an option in the following scenarios:
- Virtualization does not apply to apps that are elevated and run with a full administrative access token.
- Virtualization supports only 32-bit apps. Non-elevated 64-bit apps simply receive an access denied message when they attempt to acquire a handle (a unique identifier) to a Windows object. Native Windows 64-bit apps are required to be compatible with UAC and to write data into the correct locations.
- Virtualization is disabled if the app includes an app manifest with a requested execution level attribute.
### Request execution levels
@ -319,6 +318,8 @@ Before a 32-bit process is created, the following attributes are checked to dete
- Key attributes in the resource script data are linked in the executable file.
- There are targeted sequences of bytes within the executable file.
> **Note:** The keywords and sequences of bytes were derived from common characteristics observed from various installer technologies.
>
> **Note:** The User Account Control: Detect application installations and prompt for elevation policy setting must be enabled for installer detection to detect installation programs. For more info, see [User Account Control security policy settings](user-account-control-security-policy-settings.md).
> [!NOTE]
> The keywords and sequences of bytes were derived from common characteristics observed from various installer technologies.
> [!NOTE]
> The User Account Control: Detect application installations and prompt for elevation policy setting must be enabled for installer detection to detect installation programs. For more info, see [User Account Control security policy settings](user-account-control-security-policy-settings.md).