Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
How Windows 11 Is Quietly Mandating Enterprise Credential Guard for All
Microsoft has been steadily tightening Windows 11 security defaults for enterprise PCs. In this episode, Lucas and Luna focus on one specific mandate rolling out this year: Credential Guard. They explain what Credential Guard actually does — isolating Kerberos and NTLM secrets inside a virtualized container so that even if an attacker gains admin rights, they can't dump cached passwords or pass-the-hash. Lucas breaks down the hardware requirements (Virtualization-Based Security, TPM 2.0, UEFI Secure Boot) and the deployment timeline: starting with Windows 11 24H2, new enterprise devices will…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.