diff --git a/windows/security/identity-protection/user-account-control/how-user-account-control-works.md b/windows/security/identity-protection/user-account-control/how-user-account-control-works.md index 6d29481a6a..15f9ab184e 100644 --- a/windows/security/identity-protection/user-account-control/how-user-account-control-works.md +++ b/windows/security/identity-protection/user-account-control/how-user-account-control-works.md @@ -7,7 +7,7 @@ ms.mktglfcycl: operate ms.sitesec: library ms.pagetype: security author: brianlic-msft -ms.date: 04/19/2017 +ms.date: 09/19/2018 --- # How User Account Control works @@ -156,36 +156,40 @@ To better understand each component, review the table below:
Check UAC slider level
UAC has four levels of notification to choose from and a slider to use to select the notification level:
+UAC has a slider to select from four levels of notification.
Always Notify
-If the slider is set to Always notify, the system will notify you when programs try to install software or make changes to your computer.
-Medium
-If the slider is set to Notify me only when programs try to make changes to my computer, the User Account Control: Only elevate executable files that are signed and validated policy setting is checked:
+Always notify will:
If the policy setting is enabled, the public key infrastructure (PKI) certification path validation is enforced for a given file before it is permitted to run.
-If the policy setting is not enabled (default), the PKI certification path validation is not enforced before a given file is permitted to run. The User Account Control: Switch to the secure desktop when prompting for elevation Group Policy setting is checked.
-Recommended if you often install new software or visit unfamiliar websites.
Low
-If the slider is set to Notify me only when apps try to make changes to my computer (do not dim by desktop), the CreateProcess is called.
-Never Notify
-If the slider is set to Never notify me when, UAC prompt will never notify when an app is trying to install or trying to make any change on the computer.
-This setting is not recommended. This setting is the same as setting the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode policy setting to Elevate without prompting.
-Notify me only when programs try to make changes to my computer will:
+Recommended if you do not often install apps or visit unfamiliar websites.
Notify me only when programs try to make changes to my computer (do not dim my desktop) will:
+Not recommended. Choose this only if it takes a long time to dim the desktop on your computer.
Never notify (Disable UAC) will:
+Not recommended due to security concerns.
+