Administrator protection on Windows 11 | Microsoft Community Hub
New Windows 11 security feature provides just-in-time admin privileges to help protect users while performing key functions.
techcommunity.microsoft.com
Why is MS delaying Administrator Protection security feature?
- Thread starter win11freak
- Start date
techcommunity.microsoft.com
- Local time
- 1:52 PM
- Posts
- 32,672
- OS
- Windows 11 Pro for Workstations
Hello, 
Currently, Administrator Protection is only officially available for Windows 11 build 27774.1000 (Canary), build 26120.4733 (Beta 24H2), and build 26200.5702 (Dev 25H2).
www.elevenforum.com
Currently, Administrator Protection is only officially available for Windows 11 build 27774.1000 (Canary), build 26120.4733 (Beta 24H2), and build 26200.5702 (Dev 25H2).
Enable or Disable Administrator Protection for Admin Approval Mode in Windows 11
This tutorial will show you how to enable or disable Administrator Protection for admin approval mode elevations in Windows 11. Starting with Windows 11 build 26220.7961 (Beta 25H2) and build 26300.7965 (Dev 25H2), Administrator protection is being gradually re-enabled and aims to protect free...
www.elevenforum.com
My Computers
-
At a glance
Windows 11 Pro for WorkstationsIntel i7-8700K 5 GHz64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600...ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GD...- OS
- Windows 11 Pro for Workstations
- Computer type
- PC/Desktop
- Manufacturer/Model
- Custom self build
- CPU
- Intel i7-8700K 5 GHz
- Motherboard
- ASUS ROG Maximus XI Formula Z390
- Memory
- 64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
- Graphics Card(s)
- ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
- Sound Card
- Integrated Digital Audio (S/PDIF)
- Monitor(s) Displays
- 2 x Samsung Odyssey G75 27"
- Screen Resolution
- 2560x1440
- Hard Drives
- 1TB Samsung 990 PRO M.2,
4TB Samsung 990 PRO M.2,
TerraMaster F8 SSD Plus NAS
- PSU
- Seasonic Prime Titanium 850W
- Case
- Thermaltake Core P3 wall mounted
- Cooling
- Corsair Hydro H115i
- Keyboard
- Amazon Basics Wired Full Keyboard MD005
- Mouse
- Logitech MX Master 4
- Internet Speed
- 2 Gbps Download and 100 Mbps Upload
- Browser
- Chrome and Edge
- Antivirus
- Microsoft Defender
- Other Info
- Logitech Z625 speaker system,
Logitech BRIO 4K Pro webcam,
HP Color LaserJet Pro MFP M477fdn,
CyberPower CP1500PFCLCD
Galaxy S23 Plus phone
-
At a glance
Windows 11 ProSnapdragon X Elite (12 core) 3.42 GHz16 GB LPDDR5x-7467 MHz- Operating System
- Windows 11 Pro
- Computer type
- Laptop
- Manufacturer/Model
- Surface Laptop 7 Copilot+ PC
- CPU
- Snapdragon X Elite (12 core) 3.42 GHz
- Memory
- 16 GB LPDDR5x-7467 MHz
- Monitor(s) Displays
- 15" HDR
- Screen Resolution
- 2496 x 1664
- Hard Drives
- 1 TB SSD
- Internet Speed
- Wi-Fi 7 and Bluetooth 5.4
- Browser
- Chrome and Edge
- Antivirus
- Microsoft Defender
I guess this feature is aimed at users in enterprises not lone admin users. Instead of Windows Hello (PIN or biometrics), I get a simple Yes or No, it is like the insecure passkey all over again, anyone (hacker) or anything (malware) could just bypass it at will.
My Computer
At a glance
Home26H2CanAMD Ryzen 5 8600G (07/24)2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200...ASROCK Radeon RX 6600 Challenger D 8G @48FPS ...
- OS
- Home26H2Can
- Computer type
- PC/Desktop
- CPU
- AMD Ryzen 5 8600G (07/24)
- Motherboard
- ASROCK B650M-HDV/M.2 (07/24) BIOS 4.21 AGESA ComboAM5 1.3.0.1 (04/26)
- Memory
- 2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200 CL36 (07/24)
- Graphics Card(s)
- ASROCK Radeon RX 6600 Challenger D 8G @48FPS (08/24)
- Sound Card
- Creative Sound BlasterX AE-5 Plus (05/24)
- Monitor(s) Displays
- 24" Philips 24M1N3200ZS/00 (05/24)
- Screen Resolution
- 1920×1080@165Hz via DP1.4
- Hard Drives
- Kingston KC3000 NVMe 2TB (05/24)
ADATA XPG GAMMIX S11 Pro 512GB (07/19)
- PSU
- Seasonic Core GM 550 Gold (04/24)
- Case
- Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
- Cooling
- Noctua NH-U12S with Noctua NF-P12 (04/24)
- Keyboard
- HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
- Mouse
- Logitech M330 Silent Plus (01/26)
- Internet Speed
- 500/100 Mbps via RouterOS (05/21) & TCP Optimizer
- Browser
- Edge, Brave for YouTube, LibreWolf for FB
- Antivirus
- NextDNS blocking 1/3 Traffic
- Other Info
- Phone: Motorola Moto G86 (02/26)
Backup: Hasleo Backup Suite (PreOS)
Headphones: Sennheiser RS170 (09/10)
Chair: Huzaro Force 4.4 Grey Mesh (05/24)
Notifier: Xiaomi Mi Band 9 Milanese (10/24)
FlexCore USB-C 3.2 Gen 1 (M) to LAN (F) (08/25)
- Local time
- 8:52 PM
- Posts
- 216
- OS
- Windows 11 Pro 22H2
Or MS just realized that this feature might be bypassed by threat actors...
Those maybe among the reasons why it's delayed.
Those maybe among the reasons why it's delayed.
My Computer
At a glance
Windows 11 Pro 22H2
- OS
- Windows 11 Pro 22H2
I doubt that. It needs a lot of testing. If bypass was a reason to not have something, UAC would have been gone a long time ago. Plenty of bypasses for UAC in consent mode.
My Computer
At a glance
I'm off Windows at home.
- OS
- I'm off Windows at home.
There is no evidence of that, unless you have some. I also agree with the sage words of @pseymour about the need for proper testing before official release.
My Computers
-
At a glance
Windows 11 Pro 25H2Intel Core i9 13900KCorsair Dominator Platinum 64gb 5600MT/s DDR5...Sapphire NITRO+ AMD Radeon RX 7900 XTX Vapor-...- OS
- Windows 11 Pro 25H2
- Computer type
- PC/Desktop
- Manufacturer/Model
- Homebuilt
- CPU
- Intel Core i9 13900K
- Motherboard
- Asus ProArt Z790 Creator WiFi - Bios 3107
- Memory
- Corsair Dominator Platinum 64gb 5600MT/s DDR5 Dual Channel
- Graphics Card(s)
- Sapphire NITRO+ AMD Radeon RX 7900 XTX Vapor-X 24GB
- Sound Card
- External DAC: Cambridge Audio DACMagic200M - Headphone Amp: Topping L50
- Monitor(s) Displays
- Panasonic MX950 Mini LED 55" TV 120hz
- Screen Resolution
- 3840 x 2160 120hz
- Hard Drives
- Samsung 980 Pro 2TB (OS)
Samsung 980 Pro 1TB (Files)
Lexar NZ790 4TB
LaCie d2 Professional 6TB external - USB 3.1
Seagate Expansion 16TB external - USB 3.2
Seagate One Touch 18TB external HD - USB 3.0
- PSU
- Corsair RM1200x Shift
- Case
- Corsair RGB Smart Case 5000x (white)
- Cooling
- Corsair iCue H150i Elite Capellix XT
- Keyboard
- Incase Ergonomic USB (Microsoft clone)
- Mouse
- Logitech MX Master 3S
- Internet Speed
- Fibre 900/500 Mbps
- Browser
- Microsoft Edge Chromium
- Antivirus
- Bitdefender Total Security
- Other Info
- AMD Radeon Software & Drivers 26.1.1
Hasleo Backup Suite
Dashlane password manager
Kensington Verimark fingerprint reader
Logitech Brio 4K webcam
Orico 10-port powered USB 3.0 hub
-
At a glance
Windows 11 Pro 25H2Intel® Core™ i9-13900H32GB DDR4-3200 Dual channel*Intel Iris Xᵉ Graphics G7- Operating System
- Windows 11 Pro 25H2
- Computer type
- Laptop
- Manufacturer/Model
- Asus Vivobook X1605VA
- CPU
- Intel® Core™ i9-13900H
- Motherboard
- Asus X1605VA bios 309
- Memory
- 32GB DDR4-3200 Dual channel
- Graphics card(s)
- *Intel Iris Xᵉ Graphics G7
- Sound Card
- Realtek | Intel SST Bluetooth & USB
- Monitor(s) Displays
- 16.0-inch, WUXGA 16:10 aspect ratio, IPS-level Panel
- Screen Resolution
- 1920 x 1200 60hz
- Hard Drives
- 512GB M.2 NVMe™ PCIe® 3.0 SSD
- Mouse
- Logitech MX Ergo Trackball
- Antivirus
- Bitdefender Total Security
- Other Info
- 720p Webcam
WiFi & USB to ethernet
Most of them are related to PS, lolbins, local account, easily preventable and hardly anyone uses real UAC.
There are really only two effectively distinct settings for the UAC slider - The Old New Thing
Off and on.
devblogs.microsoft.com
My Computer
At a glance
Home26H2CanAMD Ryzen 5 8600G (07/24)2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200...ASROCK Radeon RX 6600 Challenger D 8G @48FPS ...
- OS
- Home26H2Can
- Computer type
- PC/Desktop
- CPU
- AMD Ryzen 5 8600G (07/24)
- Motherboard
- ASROCK B650M-HDV/M.2 (07/24) BIOS 4.21 AGESA ComboAM5 1.3.0.1 (04/26)
- Memory
- 2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200 CL36 (07/24)
- Graphics Card(s)
- ASROCK Radeon RX 6600 Challenger D 8G @48FPS (08/24)
- Sound Card
- Creative Sound BlasterX AE-5 Plus (05/24)
- Monitor(s) Displays
- 24" Philips 24M1N3200ZS/00 (05/24)
- Screen Resolution
- 1920×1080@165Hz via DP1.4
- Hard Drives
- Kingston KC3000 NVMe 2TB (05/24)
ADATA XPG GAMMIX S11 Pro 512GB (07/19)
- PSU
- Seasonic Core GM 550 Gold (04/24)
- Case
- Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
- Cooling
- Noctua NH-U12S with Noctua NF-P12 (04/24)
- Keyboard
- HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
- Mouse
- Logitech M330 Silent Plus (01/26)
- Internet Speed
- 500/100 Mbps via RouterOS (05/21) & TCP Optimizer
- Browser
- Edge, Brave for YouTube, LibreWolf for FB
- Antivirus
- NextDNS blocking 1/3 Traffic
- Other Info
- Phone: Motorola Moto G86 (02/26)
Backup: Hasleo Backup Suite (PreOS)
Headphones: Sennheiser RS170 (09/10)
Chair: Huzaro Force 4.4 Grey Mesh (05/24)
Notifier: Xiaomi Mi Band 9 Milanese (10/24)
FlexCore USB-C 3.2 Gen 1 (M) to LAN (F) (08/25)
- Local time
- 7:52 PM
- Posts
- 5,172
- OS
- Win 11 Pro
As a matter of interest I just checked the UAC setting on the public release (26100.4770) and it looks as it's set to "Always notify me when..." (highest setting) by default.Most of them are related to PS, lolbins, local account, easily preventable and hardly anyone uses real UAC.
There are really only two effectively distinct settings for the UAC slider - The Old New Thing
Off and on.
Doesn't seem to be so intrusive as that.
My Computers
-
At a glance
Win 11 ProAMD Ryzen™ 7 7730U24GB Dual-Channel DDR4 @ 1596MHz (22-22-22-52)512MB ATI AMD Radeon Graphics (ASUStek Comput...- OS
- Win 11 Pro
- Computer type
- Laptop
- Manufacturer/Model
- ASUS Vivobook
- CPU
- AMD Ryzen™ 7 7730U
- Motherboard
- M1605YA
- Memory
- 24GB Dual-Channel DDR4 @ 1596MHz (22-22-22-52)
- Graphics Card(s)
- 512MB ATI AMD Radeon Graphics (ASUStek Computer Inc)
- Monitor(s) Displays
- Generic PnP Monitor (1920x1200@60Hz) - P1 PLUS (1920x1080@59Hz)
- Screen Resolution
- 1920 X 1200
- Hard Drives
- 953GB Western Digital WD
- PSU
- 45 Watts
- Mouse
- Lenovo Bluetooth.
- Internet Speed
- 500 Mbps
- Browser
- Edge
- Antivirus
- Defender
-
At a glance
Windows 11AMD Ryzen 7 5800H / 3.2 GHz32 GB DDR4 SDRAM 3200 MHzNVIDIA GeForce RTX 3060 6 GB GDDR6 SDRAM- Operating System
- Windows 11
- Computer type
- Laptop
- Manufacturer/Model
- ACER NITRO
- CPU
- AMD Ryzen 7 5800H / 3.2 GHz
- Motherboard
- CZ Scala_CAS (FP6)
- Memory
- 32 GB DDR4 SDRAM 3200 MHz
- Graphics card(s)
- NVIDIA GeForce RTX 3060 6 GB GDDR6 SDRAM
- Sound Card
- Realtek Audio. NVIDIA High Definition Audio
- Monitor(s) Displays
- 15.6" LED backlight 1920 x 1080 (Full HD) 144 Hz
- Screen Resolution
- 1920 x 1080 (Full HD)
- Hard Drives
- Samsung 970 Evo Plus 2TB NVMe M.2
- PSU
- 180 Watt, 19.5 V
- Mouse
- Lenovo Bluetooth
- Internet Speed
- 500 Mbps
- Browser
- Edge
- Antivirus
- Defender
- Local time
- 7:52 PM
- Posts
- 152
- OS
- Windows 11 25H2 Pro Build 26200
Yes.
But as well there are programs popular on this site, such as WinAero tweaker that won't work with Administrator Protection. MS may not care about that. But what should happen about programs manifested as "highest available" such as regedit? My everyday account doesn't have admin rights, and I know how to launch it without elevation from an admin account. For many people Administrator Protection would break regedit.
My Computers
-
At a glance
Windows 11 25H2 Pro Build 26200i3-1215U8GB- OS
- Windows 11 25H2 Pro Build 26200
- Computer type
- PC/Desktop
- Manufacturer/Model
- MSI PRO ADL-U Cubi 5 (MS-B0A8)
- CPU
- i3-1215U
- Memory
- 8GB
- Monitor(s) Displays
- Sony 43" 4k TV
- Screen Resolution
- 3840x2160
- Hard Drives
- 250GB NVMe M.2 PCIe Gen 3 SSD
- PSU
- External 65W
- Case
- Mini PC
- Browser
- FireFox
- Antivirus
- MS
-
At a glance
Windows 11 Pro 25H2Intel i3-910016GB DDR4- Operating System
- Windows 11 Pro 25H2
- Computer type
- PC/Desktop
- Manufacturer/Model
- Dell Optiplex 3070 SFF
- CPU
- Intel i3-9100
- Memory
- 16GB DDR4
- Monitor(s) Displays
- Dell S2721
- Screen Resolution
- 3840 x 2160
- Hard Drives
- Samsung 500GB nvMe
- Case
- Dell small form factor
- Keyboard
- Cherry mechanical (Blue)
- Mouse
- Microsoft
- Antivirus
- MS Defender
I’m quite familiar with the topic. Not sure what your point is.
My Computer
At a glance
I'm off Windows at home.
- OS
- I'm off Windows at home.
- Local time
- 7:52 PM
- Posts
- 374
- OS
- macOS 14.x (plus Windows 11, Debian, FreeBSD for ARM64)
Isn't this precisely what the 'new' security feature is designed to achieve? i.e. Preventing, as far as possible, any unauthorised system alterations that may be potentially destructive, without the initiator having to jump through the hoops of gaining Admin permission. I hate to introduce this, but it is very similar to general Linux behaviour, where even a user with Admin Pivileges (in the Admin Group) has to know and enter a specific Admin Password when attempting to apply any system changes.
The question I would pose is: How does this affect the often required 'Run as Admin' option? Is that simply replaced by this 'new' procedure.
My Computers
-
At a glance
macOS 14.x (plus Windows 11, Debian, FreeBSD ...Apple M1 Max (T6001) - 8 performance 2 effici...32GB LPDDR5Apple M1 Max (32-core)- OS
- macOS 14.x (plus Windows 11, Debian, FreeBSD for ARM64)
- Computer type
- Laptop
- Manufacturer/Model
- MacBook Pro M1 MAX
- CPU
- Apple M1 Max (T6001) - 8 performance 2 efficiency cores
- Memory
- 32GB LPDDR5
- Graphics Card(s)
- Apple M1 Max (32-core)
- Hard Drives
- a) 1TB SSD + + 1TB SD Card + external SSD Drives
- Browser
- 1. Safari 2. DuckDuckGo
- Antivirus
- -
-
At a glance
Windows 11 Pro, plus VirtualBox VMs: various ...i732GB- Operating System
- Windows 11 Pro, plus VirtualBox VMs: various Windows & Linux
- Computer type
- Laptop
- Manufacturer/Model
- Microsoft Surface Laptop Studio
- CPU
- i7
- Memory
- 32GB
- Hard Drives
- 1TB SSD, plus external SSDs for Virtual Machines etc.
- Browser
- 1. MS Edge 2. DuckDuckGo
- Antivirus
- Defender
Perhaps they're still trying to decide on whether they should, before adding it to the Production channel, rename the feature to Profile Schizophrenia.
My Computers
-
At a glance
11 Homei7 13650HX16GB DDR5GeForce RTX 4060 Mobile- OS
- 11 Home
- Computer type
- Laptop
- Manufacturer/Model
- Asus TUF Gaming F16 (2024)
- CPU
- i7 13650HX
- Memory
- 16GB DDR5
- Graphics Card(s)
- GeForce RTX 4060 Mobile
- Sound Card
- Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
- Monitor(s) Displays
- Sony Bravia XR-55X90J
- Screen Resolution
- 3840×2160
- Hard Drives
- 512GB SSD internal
37TB external
- PSU
- Li-ion
- Cooling
- 2× Arc Flow Fans, 4× exhaust vents, 5× heatpipes
- Keyboard
- Logitech K800
- Mouse
- Logitech G402
- Internet Speed
- 30Mbit/s up, 500Mbit/s down
- Browser
- FF
- Antivirus
- What's an antivirus?
-
At a glance
11 Homei5 1135G716GB DDR4Intel Iris Xe- Operating System
- 11 Home
- Computer type
- Laptop
- Manufacturer/Model
- Medion S15450
- CPU
- i5 1135G7
- Memory
- 16GB DDR4
- Graphics card(s)
- Intel Iris Xe
- Sound Card
- Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
- Monitor(s) Displays
- Sony Bravia XR-55X90J
- Screen Resolution
- 3840×2160
- Hard Drives
- 2TB SSD internal
37TB external
- PSU
- Li-ion
- Keyboard
- Logitech K800
- Mouse
- Logitech G402
- Internet Speed
- 30Mbit/s up, 500Mbit/s down
- Browser
- FF
Latest Support Threads
-
Administrator Protection rollout planning?
- Started by win11freak
- Replies: 1
-
-
-
How to disable the OneDrive back up nagging from the account's badge notifications?
- Started by fleurdemer
- Replies: 1
-
Research Help Request - Network Driver Device Instance Path- Started by usualjuptier
- Replies: 2
Latest Tutorials
-
Browsers and Mail Enable or Disable Copilot Cowork in Microsoft Edge on Windows 11- Started by Brink
- Replies: 0
-
Browsers and Mail Turn On or Off Reading Mode in Microsoft Edge on Windows 11- Started by Brink
- Replies: 0
-
Browsers and Mail Enable or Disable Clipboard Suggestions in Address Bar of Microsoft Edge- Started by Brink
- Replies: 0
-
-
Phone Remove Windows 11 Device from Link to Windows app on Android Phone- Started by Brink
- Replies: 0