This session, presented by Katherine Anderson, Katharine Holdsworth, and Pratik Shah at Microsoft Ignite, guides viewers through the latest Windows 11 and Windows 365 security features designed to improve endpoint protection.

Inside Windows Security from Client to Cloud: Innovations in Windows 11 and Windows 365

Presented by: Katherine Anderson, Katharine Holdsworth, Pratik Shah
Event: Microsoft Ignite 2025 | Session BRK258

Overview

This session explores the latest innovations across Windows 11 and Windows 365, designed to boost your security posture and protect users, devices, and data. The speakers guide you through:

• Improved password and identity management
• Enhanced malware protection
• Hotpatching for security updates
• Hardware security improvements
• Cloud device management with Windows 365 Link

Key Topics Covered

From Hardware to Cloud: Security Advancements

• How security flows from device hardware to cloud-based management
• Session structure and main areas of focus

PQC (Post-Quantum Cryptography) Certificate Changes

• Introduction of PQC certificate changes to future-proof Windows security
• Simplified integration for developers

Sysmon Functionality in Windows

• Announcement: Sysmon is now integrated natively into Windows for advanced monitoring and security analytics

Identity and Authentication Enhancements

• Passkey integration with Windows Hello for seamless, secure logins
• Evolving passwordless authentication

Cloud-Based Security: Managed Protection with Windows 365

• Overview of Windows Cloud IO Protection (public preview)
• How cloud-based Windows endpoints enhance data protection
• Demonstrations of securing clipboard actions and restricting copy-paste between cloud and local PCs

Demos

• Configuring Clipboard Protection: How to set up clipboard security policies for data loss prevention
• Restricting Copy-Paste: Practical demonstration of managing data flow between cloud-managed and local devices

Cloud PC and Windows 365 Link

• Introduction to Windows 365 Link for endpoint management
• How Cloud PC devices are transforming Windows endpoint security

Additional Resources

• Secure Devices with Microsoft Intune
• Microsoft Ignite Sessions On-Demand
• Related Sessions: BRK343, BRK340

Conclusion

Stay ahead with Windows security advancements from client devices to the cloud, leveraging new features in Windows 11 and Windows 365 for stronger identity, malware, and data protection.

Session presented by Katherine Anderson, Katharine Holdsworth, and Pratik Shah during Microsoft Ignite 2025.