Microsoft Adds Windows Hello Re-Authentication for Admin Tasks in Windows 11 Preview Update
Optional update KB5067036 for Windows 11 24H2/25H2 introduces Administrator Protection to curb silent system changes.
Overview
- Administrator Protection now prompts Windows Hello verification before any action that requires elevated privileges.
- Protected actions include software installation, time or registry changes, and access to sensitive data.
- Microsoft says the feature reduces accidental system-level changes and blocks malware from making covert modifications.
- KB5067036 is available as an optional preview cumulative update via Settings > Windows Update > Check for optional updates.
- The update targets so-called free floating admin rights, and Microsoft reports no known issues at this time.