Summary: Microsoft has enhanced its Windows 11 security by expanding administrator protection tests, allowing users to enable this feature directly from Windows Security settings. This protection mechanism employs a just-in-time elevation process and Windows Hello authentication to limit admin access, thereby preventing unauthorized changes and malware attacks. The feature is currently available to Windows 11 Insiders in the Canary Channel and aims to bolster system security significantly.
Threat Actor: Microsoft | Microsoft
Victim: Windows 11 Users | Windows 11 Users
Keypoints :
- Admin protection uses a hidden elevation mechanism and Windows Hello for authentication.
- Once enabled, admin users operate with standard permissions until authentication is required.
- The feature is off by default and can be enabled by IT admins or users through Windows Security settings.