Source: BleepingComputer
Author: Sergiu Gatlan
URL: https://www.bleepingcomputer.com/news/security/microsoft-expands-testing-of-windows-11-admin-protection-feature/
# ONE SENTENCE SUMMARY:
Microsoft enhances Windows 11 security with admin protection, requiring Windows Hello authentication for critical system changes.
# MAIN POINTS:
1. Windows 11 admin protection tests expanded for Insiders to enable from Windows Security settings.
2. Admin protection uses a just-in-time elevation mechanism and Windows Hello authentication.
3. Logged-in admin users have standard permissions, needing authentication for app installations or registry changes.
4. Authentication prompts are more difficult to bypass than traditional User Account Control (UAC).
5. Admin protection is off by default and requires group policy or MDM tools for activation.
6. Windows home users can enable admin protection through Windows Security settings.
7. A reboot is necessary after changing the admin protection setting.
8. New “Quick Machine Recovery” feature will launch in early 2025 for fixing unbootable devices.
9. Upcoming features include Config Refresh and Zero Trust DNS for enhanced admin support.
10. Hotpatching is being tested for seamless security updates without rebooting in Windows 11.
# TAKEAWAYS:
1. Admin protection enhances security by limiting admin permissions and requiring verification for critical actions.
2. Users can enable admin protection independently, improving accessibility for home users.
3. Upcoming recovery features will assist in managing unbootable devices efficiently.
4. Continuous updates in Windows 11 reflect Microsoft’s commitment to cybersecurity.
5. Testing new features like hotpatching demonstrates a focus on user convenience and system stability.