Microsoft Announces New Windows 10 Security Features for Businesses

When the Windows 10 Fall Creators Update arrives in September, it will bring several new security features aimed specifically at Microsoft’s enterprise customers.

The timing of this revelation—a few weeks before Inspire (previously the Worldwide Partner Show) and a few months before Ignite—is interesting. And it suggests, perhaps, that Microsoft has been stung by criticisms that its Creators Update and Fall Creators Update releases are, perhaps, a bit too consumer-centric.

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday — and get free copies of Paul Thurrott's Windows 11 and Windows 10 Field Guides (normally $9.99) as a special welcome gift!

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Too, Microsoft has been stung in recent months by complaints from AV vendor and partner Kaspersky Lab. The software giant even admitted to some of the accused behavior.

“Our goal is to ensure customer safety as the security threat landscape continues to grow increasingly more sophisticated and adversaries are more successful at impacting the bottom line,” Microsoft Partner Director Rob Lefferts writes. “New security features in the Windows 10 Fall Creators Update allows us to be more front footed and make life harder for the bad guys. Today, I’m excited to share how we’re raising the bar by hardening our Windows platform, taking advantage of cloud intelligence and bringing everything together in one end-to-end solution.”

Essentially, Microsoft is making a ton of improvements to Windows Defender Advanced Threat Protection (ATP), a set of technologies that debuted just after the initial release of Windows 10. ATP was designed from the get-go to be proactive. That is, instead of just detecting and responding to electronic attacks, it utilizes “preventive protection” to detect and protect against new kinds of threats as they appear.

With the Fall Creators Update, Windows Defender ATP will be enhanced with several new features and tools. These technologies will be integrated “across the entire Windows threat protection stack to protect, detect and respond with rich, centralized management,” Microsoft says. And it is bringing Windows Defender ATP to Windows Server as well.

New features and capabilities include:

Windows Defender Exploit Guard., Essentially an updated version of the Enhanced Mitigation Experience Toolkit (EMET), the Exploit Guard provides intrusion detection capabilities using intelligence gleaned from the Microsoft Graph.

Windows Defender Application Guard (WDAG). Sitting between the firewall and your antivirus software, WDAG works to isolate accidentally downloaded malicious software from your devices, apps, data, and network.

Windows Defender Device Guard and Windows Defender Antivirus improvements. Windows Defender Device Guard is being updated to integrate better with Windows Defender ATP for better response times. And Windows Defender Antivirus is being updated with cloud intelligence capabilities so that it can quickly adapt to new malware as it is created.

And here’s a “better together” message I’ve not heard in a while.

“When Windows Defender ATP is used alongside threat protection solutions from Office and Azure, you get better context, richer signals, and better protection with analytics and reporting, helping you stay prepared when it comes to securing your most important assets,” Lefferts explains.

What’s not entirely clear here is which customers get these features. But we still have several months to go before the Fall Creators Update ships, and I’m sure there will be some clarity by Ignite, which also happens in September.

 

Tagged with

Share post

Please check our Community Guidelines before commenting

Conversation 10 comments

  • RobertJasiek

    27 June, 2017 - 12:30 pm

    <p>1) Will it still be possible to deactivate Windows Defender in system services?</p><p>2) <span style="color: rgb(0, 0, 0);">Will it be possible to deactivate Windows Defender in the GUI?</span></p><p><span style="color: rgb(0, 0, 0);">3) Which improvements will the source code get so as to prevent malware attacks on Windows Defender itself?</span></p><p><span style="color: rgb(0, 0, 0);">4) Will the user have the choice whether Windows Defender runs OnAccess or OnDemand then only checking manually specified directories?</span></p><p><span style="color: rgb(0, 0, 0);">5) Will the user have the choice whether Windows Defender operates only locally or also online accessessing databases?</span></p>

    • warren

      27 June, 2017 - 1:06 pm

      <blockquote><a href="#132870"><em>In reply to RobertJasiek:</em></a></blockquote><p>1) Yes.</p><p>2) Through Group Policy as is currently the case.</p><p>3) ¯_(ツ)_/¯ ….. are you using Windows Defender Device Guard? If you aren't familiar with it yet, you should be. It solves the vast majority of concerns around Defender itself being attacked.</p><p>4) This is a very 1990s question, and those times are long behind us. Most malware targets the operating system itself now, not specific file types. Manually scanning disk files is going to miss most things.</p><p>5) That is already configurable in the UI, yes.</p>

      • RobertJasiek

        27 June, 2017 - 1:23 pm

        <blockquote><a href="#132874"><em>In reply to warren:</em></a></blockquote><p>4) It depends on the used security concept. Whitelisting can be combined with OnDemand use (and other security tools). OnAccess use is typical for Blacklisting, which (if used without Whitelisting) I call the sin of the old days.</p>

  • Waethorn

    27 June, 2017 - 3:00 pm

    <p>Unless this scans for common ransomware ala Malwarebytes, they should go back to the drawing board.</p>

  • MutualCore

    27 June, 2017 - 6:19 pm

    <p>Kapersky can DIAF.</p>

  • Tony Barrett

    28 June, 2017 - 6:54 am

    <p>I don't know one enterprise that 'trusts' Microsoft security software. It's never been very good, and any sysadmin knows Windows is leakier than a sieve. A sensible company will know they'll need to shore up Windows with extra layers of non-MS protection on the PC's themselves, but paying special attention to the perimeter – ie, any&gt;any outbound firewall rules are *not* sensible, especially with all the data Win10 leaks.</p>

  • jchampeau

    Premium Member
    28 June, 2017 - 3:02 pm

    <p>I chuckled at the slide in the video that says "Intelligence Based Security." "Intelligence-based" is a compound adjective and should be hyphenated. Hopefully the security is better than the punctuation.</p>

Windows Intelligence In Your Inbox

Sign up for our new free newsletter to get three time-saving tips each Friday

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

Thurrott © 2024 Thurrott LLC