Microsoft is trying to get antivirus software away from the Windows kernel

In a strategic move to foster collaboration and mitigate potential controversies, Microsoft is actively engaging with third-party companies to establish new standards that address their concerns. As noted by Weston, “We will continue to collaborate deeply with our MVI partners throughout the private preview.”

Death comes for the blue screen

Microsoft is changing the “b” in BSoD, but that’s less interesting than the under-the-hood changes.
Credit: Microsoft

Microsoft’s latest post reveals a series of security enhancements for Windows, including innovative approaches to prevent outages reminiscent of the CrowdStrike incident. Among these updates is a significant transformation of the infamous “blue screen of death,” now officially dubbed the “unexpected restart screen.” This screen will transition from its traditional blue hue to a sleek black, a change that Microsoft had initially attempted during the early rollout of Windows 11 but later retracted.

The redesign of the unexpected restart screen aims to enhance readability and better align with the overall aesthetic of Windows 11, all while retaining essential technical information for users when necessary. However, the most impactful modification lies beneath the surface, introducing a feature known as “quick machine recovery” (QMR).

In scenarios where a Windows PC experiences multiple unexpected restarts or enters a boot loop—issues that plagued many systems during the CrowdStrike bug—QMR will facilitate a transition into Windows Recovery Environment (RE). This streamlined recovery mode offers diagnostic options and access to Safe Mode or the PC’s UEFI firmware. With QMR, Microsoft can deploy targeted remediations to affected devices via Windows RE, enabling the resolution of certain problems even when standard Windows cannot be booted. This approach aims to restore users to a productive state swiftly, minimizing the need for complex manual interventions from IT departments.

QMR will be enabled by default on Windows 11 Home, while IT administrators will have the flexibility to configure it for Pro and Enterprise versions. Both the QMR functionality and the redesigned black screen will be integrated into Windows 11 24H2, set to launch later this summer. Microsoft also plans to introduce additional customization options for QMR later this year, further enhancing user experience and system reliability.

Tech Optimizer
Microsoft is trying to get antivirus software away from the Windows kernel