USStandardProposedModel providersDeployersPlatforms

Windows 11 Administrator Protection Feature

Windows 11 管理员保护功能

Microsoft·Published 2026-09-11·Checked by 管理员 on 2026-09-13

Microsoft is preparing a new security feature for Windows 11 called 'Administrator Protection', which is expected to be officially released to the public with the 26H2 version later this year. The feature aims to provide non-privileged users with instant administrator privileges when needed, requiring Windows Hello authentication, and uses profile separation to create an isolated administrator token to defend against privilege escalation attacks.

Source ↗Remind me US · All

What it means for you

• Obligations : Companies need to assess the impact of this feature on their Windows 11 systems and consider manually enabling it via Group Policy or Intune to enhance security.
• Opportunities : The feature provides more flexible user control, reduces the workload of IT administrators in manually configuring privileges, and strengthens the system's defense against privilege escalation attacks.
• Deadlines : Microsoft plans to officially release this feature in the 26H2 version later this year. Companies should pay attention to the update timeline and prepare deployment strategies.

What to do

ComplianceAssess the applicability of the Administrator Protection feature in Windows 11 systems and consider manually enabling it via Group Policy or Intune to enhance security.

EngineeringPay attention to the release timeline of Microsoft's 26H2 version and develop corresponding deployment and testing plans to ensure timely application of system security updates.