Windows 11 KB5079458 & KB5079464 Beta and Dev Updates Offer Better Driver Policy

Microsoft recently released new Beta and Dev channel updates for Windows 11. These preview builds, identified as KB5079458 and KB5079464, focus heavily on system security and recovery. The updates bring specific changes to how the operating system handles third-party hardware drivers and how administrators manage system restore points.

Enforcing a stricter driver policy

Usually, the Windows kernel allowed third-party drivers from both the Windows Hardware Compatibility Program and older cross-signed root programs. The newer compatibility program requires strict testing, identity verification, and virus scanning. Starting with this update, Microsoft is removing default trust for those older cross-signed drivers to improve system security.

The operating system will now only trust drivers from the compatibility program by default, alongside a specific allow list. When the update installs, the new policy enters an audit mode for at least 100 hours, and three system reboots. Windows uses this time to determine if your currently loaded drivers are compatible with the strict new rules.

If everything checks out, the feature will be fully enabled. If not, the system remains in audit mode to prevent hardware issues. Some users might eventually see notifications that the system has blocked certain cross-signed drivers. Don’t forget, the same updates also bring a better Windows Setup experience, apart from policy-based removal of preinstalled Microsoft apps for enhanced security.

Point in time restore updates

When you need to roll back your computer, having clear options is vital. Microsoft is updating the point-in-time restore tool to give local administrators better control. Launching the tool now triggers a user account control prompt, followed by a new settings dialog. This menu allows admins to view and change default restore configurations while seeing a complete list of available restore points on the device.

The recovery environment is getting a few tweaks as well. If you initiate a restore from this menu, Windows will now explicitly recommend plugging your device into a power source to prevent the battery from dying during the critical rollback process.

You will also notice the operating system version number displayed in a more detailed four-part format instead of the old two-part structure. Furthermore, the update also improves the Microsoft 365 account settings experience.