IT Solutions Technology Blog

Microsoft Windows 11 – starting with this release, administrators may enable a more secure mode for processing batch files that ensures they do not change during execution by adding a value to the registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor named LockBatchFilesWhenInUse (DWORD value 0 or 1)

Refreshing the root of trust: industry collaboration on Secure Boot certificate updates – if a device does not receive the new Secure Boot certificates before the 2011 certificates expire, the PC will continue to function normally, and existing software will keep running. However, the device will enter a degraded security state that limits its ability to receive future boot-level protections. As new boot‑level vulnerabilities are discovered, affected systems become increasingly exposed because they can no longer install new mitigations. Over time, this may also lead to compatibility issues, as newer operating systems, firmware, hardware or Secure Boot–dependent software may fail to load