Here’s the translation to American English:
The recent update to Windows 11 introduces a protection feature for administrators that promises to significantly enhance the security of the platforms. This system is designed to safeguard users with administrator permissions, allowing them to perform essential functions without compromising the operating environment. This measure is particularly relevant for application developers, who will need to adopt best practices to implement this feature effectively and securely.
This new feature aims to transform the landscape of digital security by providing essential insights to information technology experts and technical users. Traditionally, applications that operate under elevated privileges pose a greater risk of being targeted by malware. The protection for administrators addresses this issue by offering “just-in-time” administrator privileges, integrating Windows Hello for a better balance between security and convenience.
Among the most significant advancements of this feature is the establishment of a security boundary through a locally managed user account. This prevents user-level malware from accessing a privileged context, creating an effective barrier against potential attacks. Additionally, self-elevation of applications is removed, requiring users to authorize each administrative action interactively, thereby strengthening their control over their devices.
For developers, the proper implementation of this feature means installing applications without requiring elevation of permissions, choosing appropriate installation locations, and avoiding file sharing between elevated and non-elevated privilege contexts. It is also crucial to prevent privilege escalation during installations and ensure that applications run under the principle of least privilege.
From an access control architecture management perspective, the new protection for administrators reinforces the regulation that users should only have the permissions necessary to carry out their tasks. These measures are expected to result in a significant decrease in security breaches and an increase in overall protection for devices running Windows 11.
The integration of advanced technologies like Windows Hello facilitates the regulation of administrator permissions, providing a smoother user experience. Microsoft has indicated that it plans to enable this protection feature by default in future updates, encouraging users to test their applications with this new configuration.
Referrer: MiMub in Spanish
