Merge pull request #5276 from MicrosoftDocs/alvinashcraft/main-powertoys-admin-priv-updates

Add notes about security and settings in PowerToys admin mode docs

Author: alvinashcraft

hub/powertoys/administrator.md

@@ -16,8 +16,11 @@ When running any application as an administrator (also referred to as elevated p
 
 There are two options for PowerToys to support applications running as administrator (with elevated permissions):
 
-1. **Recommended**: PowerToys will display a notification when an elevated process is detected. Open PowerToys Settings. On the General tab, select **Restart as administrator**.
-2. Enable **Always run as administrator** in the PowerToys Settings.
+- **Recommended**: PowerToys will display a notification when an elevated process is detected. Open PowerToys Settings. On the General tab, select **Restart as administrator**.
+- Enable **Always run as administrator** in the PowerToys Settings.
+
+> [!NOTE]
+> It's not recommended to always run an application as administrator unless absolutely necessary. Running apps as administrator may expose your system to security risks. One of our principles at Microsoft is to be **secure by default**. Read more about our **Secure Future Initiative (SFI)** [here](https://www.microsoft.com/trust-center/security/secure-future-initiative).
 
 ## Support for admin mode with PowerToys
 
@@ -54,6 +57,9 @@ Admin mode permissions may be required in the following scenarios:
   - Display shortcut
 - Video Conference Mute
 
+> [!NOTE]
+> Each PowerToys utility has information in its Settings page about whether it requires admin mode and when it's required.
+
 ## Run as administrator: elevated processes explained
 
 Windows applications run in _User mode_ by default. To run an application in _Administrative mode_ or as an _elevated process_ means that app will run with additional access to the operating system. Most apps don't need to run with elevated permission. However, a common scenario for requiring administrator permission would be to run certain PowerShell commands or edit the registry.