IT companies in South Africa can breathe a sigh of relief with significant security updates from Microsoft for Windows 11, designed to add further protection from the chip to the cloud. The more robust protection provided by secured-core PCs has enabled Microsoft to do this.

Benefits of Secured-Core PCs

• Enable secure booting
• Protect devices from firmware vulnerabilities,
• Protect operating system from attacks
• Prevent unauthorised access to devices and data

In 2021, Microsoft built additional protection into Azure, MS 365, Azure, and MS Defender for Officer 365. This extra protection blocked more than 9.6 billion malware threats, more than 35.7 billion phishing and other malicious emails, and 25.6 billion attempts to hijack enterprise customers. This has given Microsoft an accurate idea of what users need to protect themselves from threats in whatever manner they choose to work.

With this knowledge and experience, Microsoft is adding additional protection in 2022 for applications, personal data, and devices. Furthermore, IT technicians will have the ability to lock security configurations.

What’s New with Windows 11 in 2022?

Other security developments from Microsoft for this year include the following:

Zero Trust Security with Microsoft Pluton

Zero Trust is a security framework that requires any user to be authenticated and continuously validated before being granted or retaining access to applications and data. This helps protect the user’s credentials and the core parts of the operating system (OS) as soon as the device powers up. Microsoft Pluton is the only security processor regularly kept up to date with crucial security and functionality updates coming through Windows Update and does not require IT technicians to update the firmware manually. Furthermore, Pluton has been configured to work optimally with Windows 11 for improved reliability and performance.

Smart App Control without the App Store

Another significant enhancement that prevents malicious applications from running on Windows devices is Microsoft’s Smart App Control which uses code signing and Artificial Intelligence (AI) to allow only processes that are predicted to be safe to run.

Enhanced Phishing Protection with Microsoft Defender SmartScreen

This enhanced phishing protection system built-in Windows uses Microsoft Defender SmartScreen to identify and alert users about malicious applications or websites that have been hacked.

Credential Guard on Windows 11 Enterprise Edition

This capability will be enabled by default for users on the enterprise edition of Windows 11 to prevent malware from accessing confidential data and protect systems from theft of credentials.

Verification of User ID

The Local Security Authority (LSA) is responsible for authenticating and verifying credentials and logins, but attackers have developed tools to override this process and steal credentials. Therefore, Microsoft has enabled additional LSA protection by default for Windows 11 enterprise edition to prevent this.

In addition to the above innovations, Microsoft has also added Personal Data Encryption to protect user files and data when the user is not signed into their device, and Config Lock to protect users from themselves by assisting IT technicians to ensure that all devices comply with company security policies. Hypervisor-Protected Code Integrity (HVCI), which will be enabled in the next Windows 11 release, will prevent malicious code from being injected by hackers and ensure the integrity of drivers on the OS. Furthermore, persistent threats and ransomware attacks are stopped by a kernel blocklisting feature.

As a leading IT company in South Africa, Westech is confident that Microsoft’s continuous attention to and investment in improved security releases for Windows will narrow the gaps used by cyber attackers and meet any new security challenges in the hybrid workplace.

Contact Westech for your edition of Microsoft’s Enterprise Software Package.

Towards the end of June, Microsoft announced the launch of Windows 11 and, shortly after that, Windows 365. If you are feeling a little confused about two then you are not alone. The following is a simple breakdown to clarify the differences between Windows 11 and Windows 365.

What is Windows 11?

Although Windows 10 was supposed to be the last version of Windows, Windows 11 has superseded it and provides top-notch security and performance capabilities. In addition, its operating system (OS) is designed for modern hardware, so you will be able to use it as long as your PC is Intel 8th generation or newer. Support for this OS will be at least until 2031.

Most of the OS changes are visual. This includes a refreshed Start menu, which no longer uses Live Tiles and can now be found at the centre of the screen, as well as new ways to connect to content, news, games, and people.

• Maximises productivity – Access all the apps you need and multi-task with ease with tools like Snap layouts, Desktops, and a new, more intuitive redocking experience.
• Connect in new ways – Connect instantly to people right from your desktop with Microsoft Teams.
• Tailor your content – With Microsoft Edge and many widgets to choose from, you can quickly stay up to date with the news, information, and entertainment.
• Play anytime – Windows 11 takes gaming to a whole new level with graphic capabilities that rival reality.

What is Windows 365?

Windows 365 is a subscription-based service that allows you to operate from what Microsoft calls a “Cloud PC”. A Cloud PC is a virtual machine that uses a remote desktop connection from any device at hand. Windows 365 runs in the Cloud and can be accessed from any device and any location, as long as there is an internet connection. The beauty of it is that storage and RAM capacity remains unaffected since the apps and files don’t run directly off your device, but rather from the Cloud. Currently, this service is only available for enterprise use but can accommodate any number of users.

• Access files from anywhere
• Secure Cloud storage
• Improved communication
• Predictable spend
• Business continuity
• Automatic upgrades
• Centralised collaboration

How do Windows 11 and Windows 365 work together?

For the general consumer, or companies with older hardware, Windows 11 is the default choice at this stage. However, businesses looking to modernise will have two tiers of Windows 365 to choose from, depending on their size.

Windows 365 allows the creation of Cloud PC’s needed to run either Windows 10 or Windows 11. Since you only pay for the hardware configuration you choose to use, this is a highly cost-effective and practical option for businesses where employees have different job requirements. However, as a subscription-based service, Windows 365 cannot be installed and kept indefinitely, but this does however allow for easy upgrades and excellent security.

Westech, a professional IT support company in South Africa, services all major business sectors across the country and provides remote assistance for offshore companies. They understand that the world is unpredictable right now and their flexible solutions provide companies with the latest in IT technology.

Contact Westech to book an appointment to discuss how Westech can supply, install and support your IT infrastructure.