In the wake of a major incident that affected millions of Windows PCs, Microsoft is calling for significant changes to enhance the resilience of its operating system. John Cable, Microsoft’s vice president of program management for Windows servicing and delivery, said there was a need for “end-to-end resilience” in a blog post, signaling a potential shift in Microsoft’s approach to third-party access to the Windows kernel. 

While not explicitly detailing planned improvements, Cable pointed to recent innovations like VBS enclaves and the Azure Attestation service as examples of security measures that don’t rely on kernel access. This move towards a “Zero Trust” approach could have far-reaching implications for the cybersecurity industry and Windows users worldwide, as Microsoft seeks to balance system security with the needs of its partners in the broader security community.

The comment follows a Microsoft spokesman revealed last week that a 2009 European Commission agreement prevented the company from restricting third-party access to Windows’ core functions.