Microsoft Locks Down Windows Batch Scripts and Adds Smarter Audio Sharing for Windows 11 Insiders
Microsoft is giving IT admins a new security tool to prevent batch file tampering mid-execution—just in time for enterprises to tighten their script-based workflows.
Administrators can now lock batch files from modification during execution using either the registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\LockBatchFilesInUse or the application manifest control LockBatchFilesWhenInUse.
This mechanism prevents unauthorized changes to scripts while they are running, reducing the risk of runtime injection attacks. As Microsoft explains:
"We are giving administrators and Application Control for Business policy authors additional controls over the processing of batch files and CMD scripts... signature validation will only be required to be performed a single time."
For audio, the Shared Audio feature now supports individual volume sliders per listener and expanded Bluetooth LE Audio device compatibility.
This includes support for devices like the Samsung Galaxy Buds 4/Pro, Sony WF-1000XM6, and Xbox Wireless Headset.
The update is available in Windows 11 Preview Build 26220.7934 (KB5077242) for the Beta channel and 26300.7939 (KB5077243) for the Dev channel.
