Windows Enables Default Signed Apps And Drivers
On February 9, 2026, Microsoft announced that Windows 11 will enable a Baseline Security Mode that, by default, allows only properly signed apps, services, and drivers to run. The company also introduced a system-wide User Transparency and Consent model requiring explicit permissions for apps and AI agents, while providing developer tools and IT exemptions. Microsoft said the changes will roll out in staged experiments before becoming default.
Key Points
- 1Introduces Baseline Security Mode requiring runtime signature verification for apps, services, and drivers
- 2Limits malware vectors by enforcing default runtime integrity checks, reducing unsigned code execution
- 3Requires developers to sign apps and adapt behavior; IT can create exemptions for legacy tools
Scoring Rationale
Major platform security shift with official Microsoft announcement; limited rollout and developer adaptation temper immediate universality.
Sources
Public references used for this report.
Practice interview problems based on real data
1,625 SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems