“11 Essential Features and Modifications in the Windows 11 2024 Update”

"11 Essential Features and Modifications in the Windows 11 2024 Update"

“11 Essential Features and Modifications in the Windows 11 2024 Update”

Wi-Fi Drivers During Setup

When initiating a new PC or executing a clean installation of Windows, one of the most annoying issues can be the absence of a working network adapter, particularly when using a new Wi-Fi adapter that Windows 11 doesn’t support with built-in drivers. This situation is worsened by Microsoft’s requirement for a Microsoft account to complete all new Windows installations, which becomes particularly frustrating when you’re unable to connect to the internet to create or log into your account.

### The Issue: No Internet, No Drivers, No Account Setup

Usually, Windows Update is a dependable method for automatically downloading and installing drivers for new hardware, including Wi-Fi adapters. However, this necessitates an internet connection, creating a catch-22 if your network adapter isn’t functioning due to the lack of necessary drivers from Windows. Without internet connectivity, you can’t download the drivers, and without the drivers, you can’t access the internet. This results in an aggravating cycle, especially when Microsoft’s installation process requires a Microsoft account to move forward.

### The Solution: USB Driver Installation

Fortunately, Microsoft has incorporated a backup option in the first-time setup process of Windows 11. If the installer lacks the necessary drivers for your Wi-Fi adapter, you can now load drivers from a USB drive. This marks a significant enhancement over prior versions of Windows, where you would have been stranded until you could manually install the drivers post-setup.

Although this solution might not be as smooth as having native drivers or a completely offline installation option, it’s a positive advancement. Users can now pre-download the requisite drivers for their network adapters from the manufacturer’s website using a different device, save them onto a USB drive, and import them during the Windows installation process.

### Workaround for Local Account Setup

For individuals who wish to completely sidestep the Microsoft account requirement, there are still options available. One such approach involves circumventing the Microsoft account requirement by employing a hidden command during the setup. By pressing **Shift + F10** to access a Command Prompt window and entering `OOBEBYPASSNRO`, you can bypass the network requirement and proceed to create a local account instead of using a Microsoft account. This workaround is especially beneficial for advanced users wanting greater control over their system configuration.

Boosted Security for File Sharing

With the rollout of the Windows 11 24H2 update, Microsoft has implemented strengthened security protocols for SMB (Server Message Block) file-sharing connections. While these adjustments aim to enhance security, they may also lead to some disturbances for users relying on older, less secure file-sharing practices.

### What’s New: SMB Signing and Guest Access Changes

The two primary modifications in SMB file-sharing security are:

1. **SMB Signing by Default**: All SMB connections are now required to be signed by default. SMB signing helps thwart **relay attacks**, a form of attack in which an assailant intercepts and forwards SMB traffic between a client and server to gain unauthorized access. By mandating SMB signing, Windows guarantees that the transmitted data is verified and hasn’t been altered.

2. **Guest Access Disabled in Pro Edition**: In the Pro edition of Windows 11, **Guest access** for SMB shares has been turned off by default. This alteration is in line with the security measures already established for the Enterprise, Education, and Pro for Workstation versions of Windows, where Guest access has been disabled since the era of Windows 10. Guest access allows users to connect to shared resources without providing a username or password, creating a substantial security vulnerability. Disabling this capability helps safeguard against unauthorized access to confidential files.

For users operating Windows 11 **Home**, Guest fallback access continues to be available by default, but the SMB signing requirement is universal across all editions of Windows 11.

### Potential Disruptions: Why Some Things May Break

As Microsoft Principal Program Manager Ned Pyle has observed, these modifications might lead to some file-sharing configurations failing, especially if they were dependent on insecure settings. While this may be somewhat inconvenient, it ultimately serves a greater good from a security perspective. If your file-sharing configuration fails after the update, it’s likely because it was utilizing outdated or insecure practices that need to be updated to comply with contemporary security standards.

For instance, if you’ve been employing Guest access to share files across computers on your network, you may need to transition to a more secure method that demands authentication. Similarly, if your SMB connections weren’t signed up to this point, you’ll need to verify that both the client and server are set up to accommodate SMB signing.

Conclusion

The advancements in Windows 11’s setup process and file-sharing security represent a combination of convenience and vigilance. On one side, the ability to load Wi-Fi drivers from a USB drive during installation is a welcomed enhancement, especially for users with brand-new hardware. On the other