Microsoft shares more details on Windows 11 admin protection

Microsoft detailed a preview “administrator protection” feature in Windows 11 that enforces just-in-time admin privileges via Windows Hello authentication, creating temporary isolated admin tokens to limit access to critical resources and user data. Complementary measures include Smart App Control/App Control policy templates, Personal Data Encryption, and planned capabilities like Quick Machine Recovery, Zero Trust DNS, Config Refresh, and hotpatch testing—collectively aimed at reducing malware/attacker impact by blocking unsafe apps/drivers and requiring strong authentication for sensitive actions.