The CrowdStrike incident affected millions of Windows PCs worldwide, disrupted industries across the board and badly shook confidence in Microsoft. In response, the company has had to rethink its development efforts and make a major commitment to reshaping the future of the Windows platform.
In recent months, Microsoft has pledged to raise the level of security across the entire Windows ecosystem. The company is working to ensure that even an operating system that fails to boot can still be updated and repaired, a promising step toward improving reliability and protection.
At the recent Ignite 2024 conference, Microsoft announced several upcoming changes for Windows users, expected to roll out over the next few quarters. At the center of these updates is the Secure Future Initiative, which treats security as a "foundational" pillar of every product. Roughly 34,000 developers are now working full time on these top-priority challenges.
One of the first concrete results of the SFI is Quick Machine Recovery (QMR), a feature designed to prevent disasters like the infamous "July incident." Microsoft explained that QMR will let IT administrators deploy targeted fixes through Windows Update, even to machines that cannot boot.
Quick Machine Recovery will work remotely and is expected to reach the Windows Insider Program in early 2025. In the meantime, Microsoft is urging customers to prepare for the end of Windows 10 support, stressing that Windows 11 is "secure by default." The company also advises enterprise organizations to complete their move to the new operating system without delay.
Windows 11 is expected to receive several new security improvements in the coming months. One of them is a new "administrator protection" feature, designed to make standard user accounts more practical. It will let users grant temporary administrator rights through Windows Hello when making system changes. A temporary, "isolated" admin token will be created for that task and automatically destroyed once it is finished, reducing potential vulnerabilities.
Microsoft is also introducing stronger protections for access credentials, smart app control policies, data security and operating system management tools.
A major change to the Windows security architecture is on the way as well: the company plans to remove security software from the Windows kernel entirely. This move will force antivirus and security tools to run in standard user mode, on the same footing as other unprivileged programs. The initiative marks a fundamental shift in the Windows software ecosystem, with a private preview expected to launch in July 2025.
Source: Techspot
