Windows 11 Adds Protection Against Batch-File Changes During Execution
Summary
Windows 11 Insider builds add controls to prevent batch files from changing during execution. When code integrity is enabled, the mode also reduces signature validation to once per batch file.
Key points
- Administrators can enable the mode with the LockBatchFilesInUse registry value.
- Policy authors can enable the same protection using the LockBatchFilesWhenInUse application manifest control.
- The mode prevents batch files from being modified while they run.
- With code integrity enabled, signature validation is performed once rather than for each statement, reducing overhead.
- The features are rolling out to Beta and Dev Insiders in Windows 11 Preview Builds 26220.7934 and 26300.7939, respectively.
Article Details
- Event Type
- Windows 11 Insider Preview feature update
- Impact
- Adds a secure batch-processing mode that prevents batch files from being modified during execution. When code integrity is enabled, signature validation is performed once rather than for each statement, improving security and performance. The update also adds per-listener Shared Audio volume controls, a taskbar indicator, and support for additional Bluetooth LE Audio devices.