Tag: windows 11

Microsoft revealed recently that it plans to regain the trust of its users and focus in areas such as Windows stability and security. Yesterday, the company announced two new initiatives that it says will strengthen “Windows trust and security through user transparency and consent”.

The two features, Windows Baseline Security Mode and User Transparency and Consent, will make Windows more resilient according to Microsoft.

Baseline Security Mode is a new architectural safeguard designed to ensure that every application, regardless of its origin, operates within a set of “safe” boundaries by default. Only “properly signed apps, services and drivers” are allowed to run by default, but users and administrators may override the defaults to run apps, services or drivers that do not meet the new requirements.

User Transparency and Consent shifts the Windows experience toward a mobile-centric privacy model, giving users granular control over what their apps can access. This includes new real-time prompts by apps when they try to access sensitive data, such as the location, camera, or personal files, or install unintended software.

Microsoft plans to roll out the changes “through a phased approach”. It says that it is already working with partners and that the work has begun already. Next step is — probably — the integration in Insider builds for a first round of extended tests before the features will land eventually on stable machines.

It remains to be seen how these features are integrated. Run-time permission prompts sound useful, as they introduce much needed transparency to Windows for users. Baseline security mode could go either way. It might help protect machines, especially in corporate environments, but it could also become a nightmare for users who need to run something that is not signed or meeting Microsoft’s requirements. Especially, if there is no easy option to whitelist apps, drivers, or services.

It does not look as if this is coming soon, as Microsoft seems to have taken a cautious approach to introducing major new features to Windows. Slow, steady and stable could be the mantra of the year for Microsoft, especially after a rather frustrating first patch day in January 2026.

If you have installed the preview update (KB5074105) for Windows 11’s February update, you may have noticed that something is amiss. Opening the Storage part in the Settings app fires an UAC prompt now and some options seem to have been removed.

Microsoft says the security prompt is introduced to “ensure that only authorized Windows users can access system files”. An unelevated process scans and displays only the folders that the current user account has permission to see.

The move has four objectives for Microsoft:

• Preventing the unauthorized enumeration of system files.
• Reducing accidental system damage, for instance when a user deletes the previous Windows installation, as Windows can’t be rolled back anymore in that case.
• Reducing local attack vectors.
• Alignment with the least privilege security model.

Some cleanup options are AWOL

Is it a bug or a feature? While the newly introduced UAC prompt for the Storage part of the Settings app seems to work just fine, users noted that some cleanup options were missing.

Options such as Windows Update Cleanup or Device Driver Packages do not appear anymore when you select the Temporary files option on the Storage page.

Microsoft has not confirmed this as an issue and at this moment, it is unclear whether this is intentional or a bug that will get fixed eventually.

The solution: While Storage in Settings fails to provide users with elevated rights with the proper cleanup options, the legacy Disk Cleanup tool continues to show these options.

Just open the run box with the shortcut Windows-R, type cleanmgr.exe, and press the Enter-key to get started. Make sure you select “clean up system files” after the initial scan to see all options.

Alternatively, you could give third-party programs like BleachBit a try, which support extensive cleanups of temporary files.

Summary: The update didn’t just add a security prompt; it seemingly broke the logic that populates the list in the modern Settings app, forcing users to go back to the old Windows 98-era “Disk Cleanup” tool to do a proper system scrub.

It remains to be seen whether the cumulative updates for Windows 11, which Microsoft will release on February 10, 2026, will correct the issue.

When Microsoft announced Smart App Control, a feature designed to make Windows more secure by blocking processes the moment they are started, it limited the feature to new systems. You either had to install Windows 11 from scratch or start with a new PC altogether to even get the feature. Worse, once deactivated, you’d never be able to reactivate it.

This changes with the latest updates for Windows 11. Now, Smart App Control can be turned on or off under Settings > Privacy & Security > Windows Security > App & Browser Control > Smart App Control.

This change is likely coming in a few days when Microsoft releases the February 2026 cumulative updates for the operating system.

Pro Tip: You can force-enable Smart App Control in the following way:

1. Open the Start menu.
2. Type regedit.exe and press the Enter-key.
3. Confirm the security prompt.
4. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy
5. Double-click on VerifiedAndReputablePolicyState.
6. Set the value to 1.
7. Restart the PC.

What is Smart App Control?

Microsoft describes the security feature in the following way:

Smart App Control is an app execution control feature that combines Microsoft’s app intelligence services and Windows’ code integrity features to protect users from untrusted or potentially dangerous code

Here is how it works: when you run an executable file on Windows, Smart App Control checks first with Microsoft’s “intelligent cloud-powered security service” to determine if the app is safe. If Microsoft has no record, Smart App Control checks for a valid digital signature and allows it to run, if it is signed by a trusted developer.

Executable files that are not signed and unknown to the cloud are blocked.

Smart App Control offers some advantages and also some weaknesses in comparison to traditional antivirus solutions and protections. Here is the breakdown.

Smart App Control: The Pros

• Proactive Defense: Blocks threats before they can run.
• AI & Cloud Intelligence: Uses data from millions of users and Microsoft’s cloud-based AI to determine the safety of an app in real-time.
• Lighter Performance: Less resource-intensive than antivirus solutions that scan continuously.
• Blocks Potentially unwanted Programs.

Smart App Control: The Cons

• No Exceptions: Smart App Control either runs or it does not. If it makes a decision, that decision is final. There is no “allow anyway” option.
• Privacy: Windows 11 checks online whether an executable is safe.

To Microsoft’s credit, it is removing the limit to even use the feature with this month’s update, which has been a major con up until now.

While Smart App Control may have its uses, especially on PCs of users who might run into launching executable files that they shouldn’t, it is a nightmare for developers and power users. If Microsoft would introduce a bypass option, that might change.

Microsoft launched its newest operating system Windows 11 back in October 2021 to mixed reviews. Its predecessor, Windows 10, held the top spot firmly at the time while Windows 7 and Windows 8 were reaching the official end of life dates. While companies could extend support of Windows 7 by three years, Microsoft did not give home users such an option.

Microsoft CEO Satya Nadella announced during the company’s FY26 second-quarter earnings call that Windows 11 has officially surpassed one billion monthly active users.

Windows reached a big milestone: One billion Windows 11 users, up over 45% year-over-year.

In about four years, Windows 11 managed to reached the coveted one billion users mark. Windows 10, which was equally criticized when it launched in 2015, took longer to reach the important milestone.

How much longer? Not that much, it turns out. Let us take a look at the official dates that Microsoft provided for Windows 10 and Windows 11 first.

	Windows 10	Windows 11
Launch Date	July 29, 2015	October 5, 2021
1 Billion Users Date	March 16, 2020	January 2026

Windows 10 reached 1 billion monthly active users 1,706 days after it was released by Microsoft. Windows 11 managed to cross the one billion monthly active users mark in 1,576 days.

That is 130 days faster. While not impressively faster, it is important to note that Windows 11 had a handicap all along: new system requirements prevented a sizeable chunk of Windows 10’s userbase from upgrading directly to Windows 11.

While Microsoft never released numbers, estimates suggest that several hundred million devices can’t be upgraded directly. While a high percentage of these devices can be upgraded by skipping the requirements checks, the technical nature of the process likely prevents this on the vast majority of devices running Windows 10.

For users, it does not really matter how fast or slow an operating system growth, provided that it manages to reach a number of users that is sizeable enough to warrant continued support.

Windows 10 Home and Pro editions will reach end of servicing later this year. It will be interesting to see what the millions of home users will do when that time comes.

Microsoft has just released another, “out-of-band” series of updates—including KB5078127 and KB5078132—to address a critical system issue currently impacting Windows 11 (versions 25H2, 24H2, and 23H2) and Windows 10 (22H2) users worldwide.

Unlike standard monthly patches, this emergency rollout was triggered to immediately resolve a high-priority bug that was causing load and save issues for files stored in the cloud. It is the second out-of-band update of January 2026, after last week’s emergency patch to fix broken Remote Desktop Connections.

The patches are distributed automatically to all non-managed Windows PCs via Windows Update.

Essential information

• Windows 11, versions 25H2 and 24H2: KB5078127
• Windows 11, version 23H2: KB5078132
• Windows 10, version 22H2 (ESU-only): KB5078129
• Windows Server 2019: KB5078131
• Windows Server 2022: KB5078136
• Windows Server 2025: KB5078135

The issue occurred after installing the January 2026 cumulative updates for client and server versions of Windows.

Microsoft admits that users of Outlook were especially affected by the issue, provided that the Outlook PST files were stored in the cloud and not on the local machine.

Outlook users might notice hangs or issues when reopening Outlook. Other issues that users might experience included noticing that sent items were missing or that previously downloaded emails were downloaded again.

Windows users who use Outlook and store the PST files in the cloud should install the update immediately. Microsoft does not mention any other changes in the update, which means that users of unaffected systems can ignore it for now. It will be included in the February 2026 cumulative update.

How to check your Windows Version

To find your version, press Win + R, type winver, and hit Enter. Once you know your version, look for the corresponding update in Settings > Windows Update.

Windows Version	Update ID (KB)	New OS Build
Windows 11, version 25H2	KB5078127	26200.7628
Windows 11, version 24H2	KB5078127	26200.7628
Windows 11, version 23H2	KB5078132	22631.6495
Windows 10, version 22H2	KB5078137	19045.6812

While these frequent “out-of-band” patches can feel like a game of digital whack-a-mole, they serve as a reminder that updates do not only fix issues but may also introduce them.

As such, it is highly recommended to take necessary precautions, such as backing up the system partition before installing updates.

In a move that confirms privacy advocates’ long-held fears, Microsoft has reportedly handed over BitLocker encryption keys to the FBI, allowing federal agents to unlock the laptops of suspects in a fraud investigation without their consent.

The disclosure reveals a critical issue in how modern Windows devices handle security: convenience often comes at the cost of privacy. While BitLocker is designed to make your data unreadable to third-parties, the default settings on millions of Windows 11 PCs automatically upload the recovery key to Microsoft’s servers—creating a lawful “loophole” when served with a valid warrant.

For the suspects, this meant their encrypted hard drives were an open book. But for the average user, it serves as a grim reminder: if your recovery key lives in the cloud, Microsoft holds the master key to your digital life. Anyone else who may gain access, think malicious hackers, may also.

The good news? You can revoke their access today—if you know where to look.

Checking the status

If you do use computers with Windows 11 and a Microsoft account, chance is that BitLocker is used on the device and that the encryption keys are synced to the connected cloud storage.

The best way to find out if that is the case already is the following:

1. Open a web browser on your computer.
2. Navigate to https://account.microsoft.com/devices/recoverykey.
3. Sign-in to your Microsoft account (the same that you use to sign-in to Windows)

The page that opens displays all connected devices, dates, and the Bitlocker recovery key. These keys can be used to decrypt hard drives encrypted by BitLocker.

Tip: You can delete any instance here with a click on the menu icon next to an item and the selection of delete.

You can also check the status of the active computer in the following way:

1. Open Start.
2. Type CMD.
3. Select “run as administrator” while Command Prompt is selected.
4. Paste or write manage-bde -status and press the Enter-key.

Check the conversion status to find out if a drive of the computer is encrypted.

Prevent the upload of recovery keys

The easiest option, by far, is to rely solely on local accounts on Windows 11. Since local accounts are not linked to a Microsoft account, they do not sync data to the cloud. However, it is necessary to make sure that the local account is created during the initial setup.

Another option is to avoid BitLocker altogether and use a third-party — trusted — encryption software, such as VeraCrypt instead.

For that, you have to disable BitLocker on each Windows machine. Here is how you disable it on the active machine.

Notes:

• Turning off will take some time. Windows begins decrypting the selected hard drive. It can take minutes to hours, depending on the size of the drive / partition and the speed of the PC.
• You can keep using the computer. While Windows decrypts the drive in the background, you can keep on using it. It may be a bit slower than usual though.
• Keep the PC turned on during the entire process. Ideally, you keep the PC on until the decryption of the drive completes. Keep the Control Panel open or check the notification area for status updates.
• If “turn off” is not available, you are either not logged in as an administrator or there is a policy in place that prevents you from making changes.

Method 1:

1. Open the Start menu and click on the Settings icon.
2. Select Privacy & security in the Settings app.
3. Look for Device encryption.
   • If you do not see the option, skip the process and check method 2 below.
4. Click on Device Encryption.
5. Toggle the feature to Off.
6. Confirm the choice by selecting turn off again.

Method 2:

1. Press the Start button.
2. Type Manage BitLocker and select the result.
3. Check all drives listed on the Control Panel page that opens.
   • If you see “BitLocker Off” next to a drive, the encryption is disabled.
4. Select “Turn off BitLocker” for each drive with “BitLocker on”.
5. Confirm your choice by selecting “Turn off BitLocker” again.

Method 3: The Pro-method

1. Right-click on the Start menu, select Terminal (Admin).
2. Type the command manage-bde -off C: and press the Enter-key.
3. Note: replace C: with the drive letter that you want to disable BitLocker for

Imagine this: You’ve just finished a critical document or a long email, you hit “Save,” and suddenly—nothing. Your screen freezes, the cursor spins endlessly, and your application enters the dreaded state of “Not Responding.”

If this sounds like your week, you aren’t alone. A frustrating new bug in the latest Windows 11 update is causing freezes for users relying on cloud storage.

Microsoft confirms yet another bug

Will it ever end? Microsoft confirmed several bugs already that plague users who have installed the January 2026 update for Windows.

Today, Microsoft confirmed yet another issue and this one appears more widespread than the others.

• The issue: Apps might become unresponsive when saving files to cloud-backed storage
• Support page: Link
• Affected systems:
  • Windows 11: Version 25H2, 24H2, 23H2
  • Windows 10: Version 22H2
  • Enterprise: Windows 10 LTSC 2021, Windows 10 LTSC 2019
  • Server: Windows Server 2019, Windows Server 2022, Windows Server 23H2, Windows Server 2025

Microsoft admits that the bug affects file operations, such as load or save, when cloud-storage is involved. Attempts to save files to OneDrive, Dropbox or other cloud storage services may trigger the issue. Similarly, opening files from cloud locations may also cause the freezes.

Microsoft writes:

For example, in some configurations of Outlook that store PST files on OneDrive, Outlook might become unresponsive and fail to reopen unless its process is terminated in Task Manager, or the system is restarted. In addition, sent emails might not appear in the Sent Items folder, and previously downloaded might be downloaded again.

The company says that it is working on a resolution. It does not have a universal workaround for affected users at the time of writing. While it has published a workaround for users who load Outlook PST files from cloud storage, it simply states that users should contact the application developer to learn about other access options.

I will update this article once there is a fix or a universal workaround. Keep you posted.