Administrator protection on Windows 11

Enhance your organization’s Windows security with Administrator protection through Windows Hello. Available to Windows Insiders first, it will verify your identity before allowing any action that requires administrator privileges. This minimizes the risk of the user making a system-level change by mistake. Additionally, it helps prevent malware from making silent changes to the system without the user knowing. You can configure Administrator protection using Group Policy, through the settings catalog in Microsoft Intune, or with other tools coming soon. Learn more in Administrator protection on Windows 11. 

 

When will this happen: 

Administrator protection is available to Windows Insiders at this point. It’s ready to be enabled via Group Policy and settings catalog in Microsoft Intune. It’s coming soon to other management tools. 

 

How this will affect your organization: 

Administrator protection helps to protect your users while still allowing them to perform necessary functions with just-in-time administrator privileges. The main benefits include enhanced security, granular user control, and malware reduction.  

 

What you need to do to prepare: 

Check if this feature is available to you via the Windows Insider Program. If so, enable Administrator protection using Group Policy, through the settings catalog in Microsoft Intune, or with other tools coming soon. Then restart the devices. 

 

Learn more about Administrator protection by reading Additional information. 

 

Additional information: