Microsoft is expanding testing of the administrator protection feature in Windows 11, allowing Insiders to enable the security feature. They can find the option in Windows Security settings.
Administrator protection was first introduced in October in a preview build for Windows 11 Insiders in the Canary Channel. It is a security feature that uses a hidden, just-in-time elevation mechanism and Windows Hello authentication prompts that unlock administrator privileges only when needed to prevent access to critical system resources.
Once enabled, it ensures that logged-in admin users only have standard user rights. They must authenticate via Windows Hello (using a PIN or biometric method) when installing new applications or attempting to change the registry.
See also: Bug in Windows 11 24H2 blocks security updates
These additional authentication requirements will be more difficult to bypass, so they can block potential malware and attackers trying to gain access to critical system resources.
“Windows creates a temporary isolated admin token to complete the job. This temporary token is destroyed as soon as the job is complete, ensuring that no administrator privileges are retained,” a company executive said.
“Administrator protection helps ensure that users (and not malware) maintain control of system resources. It will also be inconvenient for attackers as they no longer have automatic, direct access to the kernel or other critical system security without specific Windows Hello authorization.“.
See also: Windows: Hidden tool allows quick app installation
The administrator protection feature is disabled by default and, until now, could be enabled by IT administrators through group policy or mobile device management (MDM) tools, such as Intune. However, now users (Insider) can also enable it through Windows security settings.
“Administrator protection can now be enabled from Security Settings Windows Account Protection. This allows users to enable this feature without needing help from IT administrators,” the Windows Insider team added.
“It also allows Windows home users to enable Administrator protection through Windows security settings. Changing this setting requires a Windows restart“.
See also: Microsoft launches Copilot Chat to businesses
This new security feature is currently available to Insiders in the Canary Channel who have installed Windows 11 Insider Preview Build 27774.
As you can see, Microsoft is putting a lot of emphasis on Windows 11, offering improved performance and prioritizing security. The Windows 11 administrator protection feature, along with other security measures, helps defend against cyber threats and ensures the integrity of system resources. However, it is also important for users to be proactive in their approach to cybersecurity and stay informed about best practices to stay safe online. With Windows 11, users can have confidence in the security of their devices and continue to enjoy the benefits of technology without compromising their security.
Source: www.bleepingcomputer.com
