This is Windows security!

Published Mar 02 2021 06:13 AM 5,363 Views
Subject Matter Experts:
​Windows security gets better with every release. See how Windows is a hardened OS at the core that keeps your devices protected and productive end to end. We’ll also offer a sneak peek at where we’re investing our engineering muscle to take Windows platform security even further.
2 Comments
Honored Contributor

@David Weston (DWIZZZLE) 

Hi,

thanks for the video and great demo,

 

Microsoft Defender Application Control powered by AI (WDAC), needs to be available for regular, non-enterprise end-users too.

there are companies like Kaspersky that already give end-users this feature in their internet security suit, they use AI, Cloud and more advanced services to keep regular, non-enterprise users protected, too.

 

so why Microsoft think regular end-users of Windows 10 don't need these necessary security features to stay protected with all the malware and viruses around us?

 

if it's about license money then at least provide it to Windows 10 pro users, or pro for workstation users.

requiring users to be part of an organization, and then pay for a monthly subscription for something that 3rd party companies already provide for a much lower and fixed, annual price is just not good and unacceptable.

 

there are lots of malware and payloads that can easily circumvent Windows Security (Defender) features that come by default in Windows 10, so everyone (designers, bloggers, gamers, personal users, students etc. etc.) should buy a 3rd party AV solution that gives them these important security features..because the other option is a lot more complicated and Expensive since Windows 10 doesn't include WDAC.

 

Regular Visitor

@David Weston (DWIZZZLE) I have to say the WDAC AI will be a huge win vs applocker.  However I am more and more concerned with oversights in other product groups.

 

e.g. the Firewall issue in WSL2 and the fact it in effect bypass's all security

How difficult it is to protect non-security core computers with bitlocker pins and still apply tamper protection.

No way to do wildcards/hash's in defender or the firewall.   (Think teams and a corp managed firewall policy for instance with it installed in a user folder).   

 

To me these are going back to basic's items.  It is fantastic MS is moving forward in so many ways but please don't forget about the real world needs.

 

I know there has to be a drive forward on the big topics, but all I can say is "Shall we play a game?" (Wargames)

%3CLINGO-SUB%20id%3D%22lingo-sub-2177928%22%20slang%3D%22en-US%22%3EThis%20is%20Windows%20security!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2177928%22%20slang%3D%22en-US%22%3EWindows%20security%20gets%20better%20with%20every%20release.%20See%20how%20Windows%20is%20a%20hardened%20OS%20at%20the%20core%20that%20keeps%20your%20devices%20protected%20and%20productive%20end%20to%20end.%20We%E2%80%99ll%20also%20offer%20a%20sneak%20peek%20at%20where%20we%E2%80%99re%20investing%20our%20engineering%20muscle%20to%20take%20Windows%20platform%20security%20even%20further.%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2177928%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDeployment%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EEndpoint%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2179818%22%20slang%3D%22en-US%22%3ERe%3A%20This%20is%20Windows%20security!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2179818%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F125192%22%20target%3D%22_blank%22%3E%40David%20Weston%20(DWIZZZLE)%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3Ethanks%20for%20the%20video%20and%20great%20demo%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMicrosoft%20Defender%20Application%20Control%20powered%20by%20AI%20(WDAC)%2C%20needs%20to%20be%20available%20for%20regular%2C%20non-enterprise%20end-users%20too.%3C%2FP%3E%3CP%3Ethere%20are%20companies%20like%20Kaspersky%20that%20already%20give%20end-users%20this%20feature%20in%20their%20internet%20security%20suit%2C%20they%20use%20AI%2C%20Cloud%20and%20more%20advanced%20services%20to%20keep%20regular%2C%20non-enterprise%20users%20protected%2C%20too.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eso%20why%20Microsoft%20think%20regular%20end-users%20of%20Windows%2010%20don't%20need%20these%20necessary%20security%20features%20to%20stay%20protected%20with%20all%20the%20malware%20and%20viruses%20around%20us%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eif%20it's%20about%20license%20money%20then%20at%20least%20provide%20it%20to%20Windows%2010%20pro%20users%2C%20or%20pro%20for%20workstation%20users.%3C%2FP%3E%3CP%3Erequiring%20users%20to%20be%20part%20of%20an%20organization%2C%20and%20then%20pay%20for%20a%20monthly%20subscription%20for%20something%20that%203rd%20party%20companies%20already%20provide%20for%20a%20much%20lower%20and%20fixed%2C%20annual%20price%20is%20just%20not%20good%20and%20unacceptable.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethere%20are%20lots%20of%20malware%20and%20payloads%20that%20can%20easily%20circumvent%20Windows%20Security%20(Defender)%20features%20that%20come%20by%20default%20in%20Windows%2010%2C%20so%20everyone%20(designers%2C%20bloggers%2C%20gamers%2C%20personal%20users%2C%20students%20etc.%20etc.)%20should%20buy%20a%203rd%20party%20AV%20solution%20that%20gives%20them%20these%20important%20security%20features..because%20the%20other%20option%20is%20a%20lot%20more%20complicated%20and%20Expensive%20since%20Windows%2010%20doesn't%20include%20WDAC.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2190506%22%20slang%3D%22en-US%22%3ERe%3A%20This%20is%20Windows%20security!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2190506%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F125192%22%20target%3D%22_blank%22%3E%40David%20Weston%20(DWIZZZLE)%3C%2FA%3E%26nbsp%3BI%20have%20to%20say%20the%20WDAC%20AI%20will%20be%20a%20huge%20win%20vs%20applocker.%26nbsp%3B%20However%20I%20am%20more%20and%20more%20concerned%20with%20oversights%20in%20other%20product%20groups.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ee.g.%20the%20Firewall%20issue%20in%20WSL2%20and%20the%20fact%20it%20in%20effect%20bypass's%20all%20security%3C%2FP%3E%3CP%3EHow%20difficult%20it%20is%20to%20protect%20non-security%20core%20computers%20with%20bitlocker%20pins%20and%20still%20apply%20tamper%20protection.%3C%2FP%3E%3CP%3ENo%20way%20to%20do%20wildcards%2Fhash's%20in%20defender%20or%20the%20firewall.%26nbsp%3B%20%26nbsp%3B(Think%20teams%20and%20a%20corp%20managed%20firewall%20policy%20for%20instance%20with%20it%20installed%20in%20a%20user%20folder).%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20me%20these%20are%20going%20back%20to%20basic's%20items.%26nbsp%3B%20It%20is%20fantastic%20MS%20is%20moving%20forward%20in%20so%20many%20ways%20but%20please%20don't%20forget%20about%20the%20real%20world%20needs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20there%20has%20to%20be%20a%20drive%20forward%20on%20the%20big%20topics%2C%20but%20all%20I%20can%20say%20is%20%22Shall%20we%20play%20a%20game%3F%22%20(Wargames)%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Oct 04 2021 05:00 PM
Updated by:

Session Resources