Author: Martin Brinkmann

Will it disallow access to the Windows kernel by security products? Not right now, but the path could lead there.

Microsoft held a security conference earlier this week at its Redmond headquarters. It invited business partners, especially those in the security field, to participate.

The hot topic during the conference was the Crowdstrike disaster that took down more than 8.5 million PCs worldwide. More precisely, how to avoid a repeat of it in the years to come.

David Weston, Vice President Enterprise and OS Security at Microsoft, published a summary of the event on the Microsoft Windows blog.

The main short-term takeaways:

• Microsoft and security vendors agree that choice is good when it comes to security products for Windows.
• A list of best practices for developing and distributing security updates will be created based on discussing Safe Deployment Practices.
• Other areas of improvement include testing, information sharing, and improved incident response effectiveness.

For the long-term, Microsoft plans to introduce new security capabilities to the Windows platform to add “security capabilities outside of kernel mode”.

Microsoft will design and develop the new platform in collaboration with “ecosystem partners”. The goal is “enhanced reliability without sacrificing security” according to Microsoft.

The blog post ends with several partner quotes and how everyone appreciated the opportunity to discuss security. Reading between the lines, several expressed concern that security could suffer, especially if kernel access would be revoked.

Closing Words

It will take some time before changes, even the discussed short-term changes, are applied. While Microsoft said nothing about pushing security products out of the kernel on Windows, some are worried already that Microsoft could create a solution that benefits its own products over everyone else’s.

It would not be the first time in the history of Windows.

What is your take on this development? It should be clear that something needed to be done to avoid another scenario that would cause millions of PCs to go down in flames. Are the proposed changes the right way?

Super Microsoft Configuration is a new tool by “built by Bel”. It is an “advanced and fully automated alternative to the traditional MSConfig tool” according to the developer.

Key Details:

• It is designed specifically for Microsoft’s Windows 11 operating system.
• It checks the state of certain Windows features and settings to rate them as good or bad.
• Bad settings can be “fixed”.

The current version of the app has the title Super System Configuration. Whether that is going to be the new name or not is unclear. The developer has a habit of changing program names.

Using Super Microsoft Configuration

The program is portable and you may run it right after you have downloaded it from the GitHub repository.

Note: Windows SmartScreen may display a security warning. The reason for this is that it is a new program, not because it is malicious. A check on Virustotal returned a single false positive hit.

Hit the check button in the interface to run the scan. This should not take longer than a few seconds and you end up with a long log at the end.

The bad entries are shown in red. You can check “show only bad config” to hide the good settings to better focus on what the program considers bad.

While that helps, it is possible that you will still end up with dozens of entries. The main issue here is that each entry is listed in a single row. Since the information includes a description, Registry path, and other information, it is possible that you may need to scroll to read everything.

As far as what is considered beta is concerned, here are a few examples:

• Sending feedback and error reports.
• Radio access.
• Disabled Windows Defender Real-time Protection.
• Disabled User Account Control.
• Disabled Secure Boot.

At least two of the detected bad configurations were erroneous. User Account Control was enabled on the test system, for instance. The program returned no “current value” for the entry, which is why it detected it as bad.

You may double-click on an entry to display the details in a new window. This improves accessibility.

The window includes buttons to apply the fix or revert it. Here you may also copy the Registry value to search for it online.

It is necessary to go through them one by one, as you may not want to disable or enable features that might cause issues.

This makes Super System Configuration an advanced tool. The GitHub repository says as much as well.

Verdict

The application is not that different from other tweaking tools, including some of the developer’s past and present offerings. The main difference is the scanning and that it reveals advanced information, such as Registry keys.

On the other hand, it is difficult to navigate and there is no distinction between disabling quick links on Microsoft Edge’s new tab page and enabling Secure Boot or disabling microphone access.

It is not something that inexperienced users may want to use. It lacks guidance and at least some kind of warning or classification for some of the tweaks.

Considering that the program is available as a preview, it is a good idea to monitor its development and wait for the final release. For now, it is an interesting rough application.

Microsoft has restored a feature that it removed some time ago from Windows. At least in the Beta version of the operating system, sign-out is once again accessible directly when clicking on the profile icon in the Start menu.

Here is the current process in Windows 11 when you want to sign out using the Start menu:

1. Click on the Start button to open the Start menu.
2. Click on the profile icon.
3. Activation of the menu (three dots).
4. Selection of sign out.

Once the change lands, the process is the following one:

1. Click on the Start button to open the Start menu.
2. Click on the profile icon.
3. Select Sign out.

It used to be this way, but Microsoft introduced the account manager to the Start menu. The main purpose of it, if you ask me, is to advertise Microsoft 365 and Microsoft cloud storage.

It shows the M365 subscription status and also the available cloud storage. For that, Microsoft removed the options to sign out or switch users from the main interface and hid it behind a new menu that it added just for that purpose.

If you look at the screenshot of the revised version, you may notice that something is amiss. Where is the option to switch to another user? Microsoft says that it will show a list of signed in users under menu.

The screenshot shows nothing of it though. Maybe it is only displayed when there are other users who are signed in.

Note: a better way of signing out is to right-click on the Start button. It shows that option next to others under shutdown.

Since it is a beta release, it is possible that Microsoft is going to alter the interface further before it hits the stable channel and the majority of users.

How do you sign our or shut down your Windows PCs? Do you have any preference? Feel free to leave a comment down below.