Windows 11 Introduces New Feature to Block Unauthorized Access to System Files

Microsoft has released KB5074105, a critical preview update for Windows 11 versions 25H2 and 24H2 (OS Builds 26200.7705 and 26100.7705), introducing enhanced security mechanisms to prevent unauthorised access to sensitive system files.

This non-security update significantly improves the operating system’s file protection capabilities, addressing growing concerns about privilege escalation and tampering with system files.

Enhanced System File Protection

The KB5074105 update delivers robust protection against unauthorised access to Windows system directories and critical files.

The new feature implements stricter access control validation mechanisms that prevent unprivileged users and malicious processes from modifying or reading protected system resources.

This addresses a common attack vector exploited by both targeted threats and commodity malware targeting enterprise environments.

Security researchers have identified an increasing number of incidents in which threat actors attempt direct file system manipulation to escalate privileges or plant persistent backdoors.

The new protection mechanism in KB5074105 validates user permissions at multiple layers, ensuring that only legitimate system processes can interact with critical files.

This layered approach significantly reduces the attack surface for privilege escalation exploits.

Alongside file protection enhancements, the update includes KB5074104, a Windows 11 servicing stack update (version 26100.7704).

The servicing stack is the foundational component responsible for installing Windows updates safely and reliably.

This critical improvement ensures that future security patches and system updates deploy more securely and efficiently across enterprise networks.

Organizations managing large device fleets will benefit from enhanced reliability in patch deployment pipelines, reducing the risk of update failures that could leave systems vulnerable during critical maintenance windows.

AI Component Updates

The KB5074105 release updates multiple AI components powering Windows 11’s intelligent experiences.

All AI-related modules, including Image Search, Content Extraction, Semantic Analysis, and Settings Model, have been updated to version 1.2601.1268.0.

These updates enhance on-device AI processing security and performance while maintaining data privacy.

AI Component Versions Updated

Microsoft is implementing a phased rollout strategy: a gradual rollout phase in which the update is deployed to devices over time, followed by a normal rollout to all eligible systems.

This approach minimises potential compatibility issues while ensuring comprehensive coverage across Windows 11 deployments.

Security teams should prioritise testing this update in controlled environments before enterprise-wide deployment.

Organizations can obtain KB5074105 via Windows Update, the Microsoft Update Catalog, Windows Server Update Services (WSUS), and the Business Catalog.

Organizations should plan immediate deployment schedules for Windows 11 systems, particularly in security-sensitive environments.

The enhanced file protection mechanisms provide critical safeguards against evolving threat landscapes.

IT administrators should monitor the Windows release health dashboard for any emerging issues during the gradual rollout phase and coordinate patch management strategies accordingly.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.