Microsoft has expanded testing of its Windows 11 administrator protection feature, allowing Insiders to enable the security feature from Windows Security settings. The feature uses a hidden, just-in-time elevation mechanism and Windows Hello authentication prompts to block access to critical system resources. Once enabled, it ensures that logged-in admin users have only standard user permissions.
The administrator protection feature is off by default and must be enabled by IT admins or users via Windows Security settings. Enabling this feature requires a Windows reboot. The feature is currently available to Insiders in the Canary Channel who have installed the latest Windows 11 Insider Preview Build. Microsoft plans to roll out additional security features, including Quick Machine Recovery and Zero Trust DNS, in the coming months.
