A low integrity application is one that performs tasks that could potentially compromise the operating system, like as a Web browsĪpplications with lower integrity levels can't modify data in applications with higher integrity levels.

A high integrity application is one that performs tasks that modify system data, such as a disk partitioning application.

Integrity levels are measurements of trust: Windows protects processes by marking their integrity levels. Both the parent and child processes, however, must have the same integrity level. Child processes inherit the user's access token from the parent process. The only exception is the relationship that exists between parent and child processes. With UAC, each application that requires the administrator access token must prompt the end user for consent.

This article describes how UAC works and how it interacts with the end-users. UAC reduces the risk of malware by limiting the ability of malicious code to execute with administrator privileges. User Account Control (UAC) is a key part of Windows security.

Process monitor logging