Windows 11 battens down security with new admin rights check feature

From PC World: As mentioned in the recent Windows Insider blog post, the latest preview version of Windows 11 for Insiders on the Dev Channel includes a new feature called “Administrator Protection,” which “aims to protect free floating admin rights for administrator users allowing them to still perform all admin functions with just-in-time admin privileges.”

In a deeper dive via this Windows IT Pro blog post, we’re told that Administrator Protection kicks in whenever you want to do anything that requires administrator privileges, such as install software, change system settings, or access sensitive data. To do any of that, you’ll need to authenticate via Windows Hello on demand (which means setting up and using your fingerprint, face scan, or PIN code).

Not only does Administrator Protection help you avoid making accidental changes to your system, it also protects against malware that might otherwise make hidden changes that go undetected.

For now, Administrator Protection is off by default and must be turned on manually via Windows Security or via group policy. However, in the future, Administrator Protection will be enabled by default. Expect this new feature to be rolled out to all users later this summer.

View: Full Article