How to Configure Your Windows 11 PC for Administrator Protection
1 min read
Summary
A new security feature called Administrator Protection is being introduced by Microsoft in its Windows 11 operating system to counter increasing administrator-level account theft and malware.
The feature works by allowing users to activate temporary ‘just-in-time’ access to elevated access roles, which authenticates user via Windows Hello (facial recognition, fingerprint or PIN).
This elevates their access rights beyond the standard user level, but only for the duration of the specific task for which access is needed, and with two-step verification.
The feature is currently in Beta, available in the Windows 11 Insider build 27774 or later, and can be enabled via Windows Security or Local Group Policy Editor.
It will be gradually rolled out to all Windows 11 users and will not be available on Windows 10 or earlier versions that do not support Trusted Platform Module (TPM).
