Features new to Windows 8

Snap feature: Xbox Music app, along Photos app snapped into a sidebar to the right side of the screen

Windows 8 introduces the new Windows Runtime (WinRT) platform, which can be used to create a new type of application officially known as Windows Store apps and commonly called Metro-style apps. Such apps run within a secure sandbox and share data with other apps through common APIs. WinRT, being a COM-based API, allows for the use of various programming languages to code apps, including C++, C++/CX, C#, Visual Basic .NET, or HTML5 and JavaScript.[1][2] Metro-style apps are packaged and distributed via APPX, a new file format for package management.[3] Unlike desktop applications, Metro-style apps can be sideloaded, subject to licensing conditions.[4] Windows 8.1 Update allows for sideloading apps on all Windows 8.1 Pro devices joined to an Active Directory domain.[5]

In Windows 8 up to two apps may snap to the side of a widescreen display to allow multi-tasking, forming a sidebar that separates the apps. In Windows 8.1, apps can continually be resized to the desired width.[6] Snapped apps may occupy half of the screen.[7] Large screens allow up to four apps to be snapped.[7] Upon launching an app, Windows allows the user to pick which snapped view the app should open into.[8]

The term "Metro-style apps" referred to "Metro", a design language prominently used by Windows 8 and other recent Microsoft products. Reports surfaced that Microsoft employees were told to stop using the term due to potential trademark issues with an unspecified partner. A Microsoft spokesperson however, denied these reports and stated that "Metro-style" was merely a codename for the new application platform.[9]

Windows 8 introduces APIs to support near field communication (NFC) on Windows 8 devices, allowing functionality like launching URLs/applications and sharing of information between devices via NFC.[10]

Windows Store is a digital distribution platform built into Windows 8, which in a manner similar to Apple's App Store and Google Play, allows for the distribution and purchase of apps designed for Windows 8. Developers will still be able to advertise desktop software through Windows Store as well. To ensure that they are secure and of a high quality, Windows Store will be the only means of distributing WinRT-based apps for consumer-oriented versions of Windows 8.[11]

In Windows 8.1, Windows Store features a redesigned interface with improved app discovery and recommendations and offers automatic updates for apps.[12]

The Calculator app running in Windows 8.1

A number of apps are included in the standard installation of Windows 8, including Mail (an email client), People (a contact manager), Calendar (a calendaring app), Messaging (an IM client), Photos (an image viewer), Music (an audio player), Video (a video player), Camera (a webcam or digital camera client), SkyDrive, Reader (an e-book reader), and six other apps that expose Bing services (Search, News, Finance, Weather, Travel and Sports).

Windows 8.1 adds Calculator,[7] Alarm Clock,[7] Sound Recorder,[7] Reading List, Food & Drink, Health & Fitness,[24] Help + Tips,[18] Scan,[25] and a file manager integrated in the SkyDrive app.[8]

Windows 8 also includes a Metro-style system component called PC Settings which exposes a small portion of Control Panel settings. Windows 8.1 improves this component to include more options that were previously exclusive to Control Panel.[6][26] Windows 8.1 Update adds additional options to PC Settings.[23]

The new Start screen in Windows 8 replaces the Start menu seen in previous versions of Windows

Windows 8 introduces a new form of start menu called Start screen, which resembles the home screen of Windows Phone, and is shown in place of the desktop on startup. The Start screen serves as the primary method of launching applications and consists of a grid of app tiles which can be arranged into columnar groups; groups can be arranged with or without group names.[27] App tiles can either be small (taking up 1 square) or large (taking up 2 squares) in size and can also display dynamic content provided by their corresponding apps, such as notifications and slide shows. Users can arrange individual app tiles or entire groups. An additional section of the Start screen called "All Apps" can be accessed via a right click from the mouse or an upward swipe and will display all installed apps categorized by their names. A semantic zoom feature is available for both the Start screen and "All Apps" view which enables users to target a specific area or group on the screen.[27] The Start screen can uninstall apps directly.[28]

Windows 8.1 makes the following changes to the Start screen:

• The "All Apps" section, now accessed with a hidden downward arrow or upward touch gesture, features a visible search bar which can display results for apps or other items.[29] The section is dismissed by a similar button with an upward arrow.[30] An option to display the "All Apps" section automatically instead of the Start screen is available.[29]
• On high-resolution display monitors with sufficiently large physical screen sizes, an option to display additional tiles on the Start screen is available.[31]
• Start screen tiles can be locked in place to prevent accidental manipulation of tiles.[32]
• The uninstall command allows Windows Store apps to be uninstalled from multiple computers.[33]
• More size options for live tiles on Start screen: small, medium, wide, and large.[7] The "small" size is one quarter of the default size in Windows 8.[6][26]
• Expanded color options on the Start screen, which now allows users to customize a color and a shade of one's own choice instead of choosing from limited colors.[7]
• New background options for the Start screen, including animated backgrounds and the ability to use the desktop wallpaper.[34]
• Enhanced synchronization settings, including those for app tile arrangement, tile sizes, and background.[35]
• In a multi-monitor configuration, Windows 8.1 can optionally display the Start screen only on the primarily display monitor instead of the currently active monitor when the ⊞ Win key is pressed.[29]
• Multiple desktop applications can be selected from the Start screen and pinned to the taskbar at once, or multiple desktop applications and Metro-style apps can be selected from the "All Apps" view and pinned to the Start screen at once.[36] Windows 8.1 Update augments this capability by allowing Metro-style apps to be pinned to the taskbar.[37] The Start menu in previous versions of Windows allowed only one desktop application to be selected and/or pinned at a time.
• By default, Windows 8.1 no longer displays recently installed apps and their related entries on the Start screen; users must manually pin these items.[38]
• Windows 8.1 introduces options to categorize apps listed within the "All Apps" section of the Start screen. Apps can be categorized by their name, the date they were installed, their frequency of use, or based on their categories.[39][40] When sorted by category, desktop applications can optionally be prioritized within the interface.[29] Windows 8.1 Update allows additional app tiles to be displayed within the "All Apps" section of the Start screen.[41]
• The ability to highlight recently installed apps has been enhanced in Windows 8.1 Update, which now displays the total number of recently installed apps within the lower-left corner of the Start screen in addition to highlighting.[42][43] In contrast, the Start menu interface included in previous versions of Windows only highlighted apps. Windows 8.1 Update also enables semantic zoom upon clicking or tapping the title of an app category.[41]

Windows 8.1 reverts two changes that were featured in Windows 8. Windows 8 removed the Start button on the taskbar in favor of other ways of invoking the Start screen. Windows 8.1 restores this button.[44][45] Windows 8 also showed the Start screen upon logon, as opposed to other editions of Windows that show the desktop. In Windows 8.1, user may now choose which one to see first.[44] Windows 8.1 Update boots to the desktop by default on non-tablet devices[41] and introduces the ability to switch to the taskbar from the Start screen or from an open Metro-style app by directing the mouse cursor toward the bottom of the screen.[42]

Windows 8.1 introduces a new "slide to shutdown" option which allows users to drag their partially revealed lock screen image toward the bottom of the screen to shut down the operating system.[46] Windows 8.1 Update introduces a visible power button on the Start screen.[47] This power button does not appear on all hardware device types.[48] By default, new account profiles in Windows 8.1 Update also receive four additional tiles pinned to the Start screen: This PC, PC Settings, Documents, and Pictures. In Windows RT, only the PC Settings tile is added.[41]

In Windows 8, searching from the Start screen or clicking on the Search charm will display search results within a full-screen interface. Unlike previous versions of Windows where searching from the Start menu returned results from multiple sources simultaneously, Windows 8 searches through individual categories: apps, settings, and files.[49] By default, Windows 8 searches for apps after a user begins searching from the Start screen or Search charm, but can also search other categories from the user interface or via keyboard shortcuts.[49] Pressing ⊞ Win++Q opens the Search charm to search for apps, ⊞ Win++F searches for files, and ⊞ Win++W searches for settings.[20] Search queries can also be redirected between specific categories or apps after being entered. When searching for apps, Windows 8 will display a list of apps that support the Search charm; frequently used apps will be prioritized and users can pin individual apps so that they always appear.[50] The Search charm can also search directly within apps if a user redirects an entered search query to a specific app or presses ⊞ Win++Q from within an app that is already open.[51][52] When searching for files, Windows 8 will highlight words or phrases that match a search query and provide suggestions based on the content and properties of files that appear. Information about the files themselves, such as associated programs and sizes, appear directly beneath filenames. If a user hovers over a file with the mouse cursor or long presses with a finger a tooltip will appear and display additional information.[49]

In Windows 8.1, searching no longer opens a full-screen interface; results are instead displayed in a Metro-style flyout interface. Windows 8.1 also reinstates unified local search results, and can optionally provide results from Bing. Dubbed "Smart Search," Windows 8.1 and Bing can optionally analyze a user's search habits to return relevant content that is stored locally and from the Internet.[53][54] When enabled, Smart Search exposes additional search categories within the user interface: web images and web videos,[54] and can be accessed via a new keyboard shortcut, ⊞ Win++S+.[55] A new full screen "hero" interface powered by Bing can display aggregated multimedia (such as photos, YouTube videos, songs/albums on Xbox Music) and other content (such as news articles and Wikipedia entries) related to a search query.[19][56] Like its predecessor, Windows 8.1 allows users to search through setting and file categories, but the option to search through a category for apps is removed from the interface; the keyboard shortcut previously associated with this functionality, ⊞ Win++Q, now displays unified search results. The Search charm also can no longer search from within apps directly or display a list of compatible apps. To search for content within apps, users must first open an app and, if available, use a search feature from within that app's interface.[54]

Windows 8.1 Update enhances the Bing Smart Search feature by providing support for natural language queries, which can detect misspellings and display apps or settings relevant to a query. For example, typing "get apps for Windows" will display a shortcut to the Windows Store.[23][57] Windows 8.1 Update also introduces a visible search button on the Start screen that acts as a shortcut to the Metro-style flyout interface.[41]

The Kind property introduced in Windows Vista to express a more friendly notion of file type has been expanded to include support for Playlist (where items are playlists) in Windows 8. In Windows 8.1, Unknown (where the kind of item is not known) is also introduced.[58]

Windows 8 introduces a redesigned lock screen interface based on the Metro design language. The lock screen displays a customizable background image, the current date and time, notifications from apps, and detailed app status or updates.[59] Two new login methods optimized for touch screens are also available, including a four-digit PIN, or a "picture password," which users allow the use of certain gestures performed on a selected picture to log in.[60] These gestures will take into account the shape, the start and end points, as well as the direction. However, the shapes and gestures are limited to tapping and tracing a line or circle. Microsoft found that limiting the gestures increased the speed of sign-ins by three times compared to allowing freeform methods.[60] Wrong gestures will always deny a login, and it will lock out the PC after five unsuccessful attempts, until a text password is provided.[60][61]

Windows 8.1 introduces the ability to display a photo slide show on the lock screen.[62][63] The feature can display images from local or remote directories, and includes additional options to use photos optimized for the current screen resolution, to disable the slide show while the device is running on battery power, and to display the lock screen slide show instead of turning off the screen after a period of user inactivity.[62] The lock screen can also display interactive toast notifications. As examples, users can answer calls or instant messages received from Skype contacts,[64] or dismiss alarm notifications from the lock screen.[65] Users can also take photos without dismissing the lock screen.[66]

A Windows 8 toast notification informing the user that a removable drive has been attached. Clicking or tapping the notification brings up the AutoPlay dialog, allowing users to configure actions that Windows should take after the insertion of a removable media device.

Windows 8 introduces new forms of notifications for Metro-style apps and for certain events in File Explorer.[67]

• Toast notifications: alert the user to specific events, such as the insertion of removable media
• Tile notifications: display dynamic information on the Start screen, such as weather forecasts and news updates
• Badge notifications: display numeric counters with a value from 1-99 that indicate certain events, such as the amount of unread e-mail messages or amount of available updates for a particular app. Additional information may also be displayed by a badge notification, such as the status of an Xbox Music app.

The PC Settings component includes options to globally disable all toast notifications, app notifications on the lock screen, or notification sounds; notifications can also be disabled on a per-app basis. In the Settings charm, Windows 8 provides additional options to suppress toast notifications during 1 hour, 3 hour, or 8 hour time intervals.[68]

Windows 8.1 introduces a Quiet Hours feature, also available on Windows Phone, that allows users to suppress notifications based on the time of day (e.g., notifications can be disabled from 12:00 AM to 6:00 PM).[69]

Windows 8 allows users to link profiles with a Microsoft account to provide additional functionality, such as the synchronization of user data and settings,[70] including those belonging to the desktop, and allows for integration with other Microsoft services such as Xbox Live, Xbox Music, Xbox Video (for gaming and multimedia) and SkyDrive online file storage.[71][72]

Windows 8.1 displaying the multi-monitor taskbar in "Duplicated on all taskbars" mode

Windows 8 includes improved support for multi-monitor configurations; the taskbar can now optionally be shown on multiple displays, and each display can also show its own dedicated taskbar. In addition, options are available which can prevent taskbar buttons from appearing on certain monitors. Wallpapers can also be spanned across multiple displays, or each display can have its own separate wallpaper.[73]

Windows 8.1 includes improved support for high-resolution monitors.[74] A desktop scaling feature now helps resize the items on the desktop to solve the visibility problems on screens with a very high native resolution.[75] Windows 8.1 also introduces per-display DPI scaling, and provides an option to scale to 200%.[76]

The new File Explorer interface in Windows 8

Windows Explorer, which has been renamed as File Explorer, now incorporates a ribbon toolbar, designed to bring forward the most commonly used commands for easy access. The "Up" button (which advances the user back a level in the folder hierarchy) that was removed from Explorer after Windows XP has also been restored.[77] Additionally, File Explorer features a redesigned preview pane that takes advantage of widescreen layouts.[77] File Explorer also provides a built-in function for mounting ISO, IMG, and VHD files as virtual drives.[78] For easier management of files and folders, Windows 8 introduces the ability to move selected files or folders via drag and drop from a parent folder into a subfolder listed within the breadcrumb hierarchy of the address bar in File Explorer.[79]

Progress windows for file operations have also been redesigned; offering the ability to show multiple operations at once, a graph for tracking transfer speeds, and the ability to pause and resume a file transfer.[80] A new interface has also been introduced for managing file name collisions in a file operation, allowing users to easily control which conflicting files are copied.[81]

Libraries introduced in Windows 7 can now have their icons changed through the user interface;[82] previously, users had to change icons by manually editing configuration files.[83] With Windows 8.1., libraries can now also include removable storage devices; previously, adding removable storage devices to libraries was not supported.[84] Windows 8.1, however, no longer creates any default libraries for new users, and does not display the Libraries listing in File Explorer by default.[85] Instead, Windows 8.1 introduces shortcuts to the default user profile folders (Documents, Downloads, Pictures, etc.) within the This PC location of File Explorer. The libraries can be enabled in the Options menu.[86]

HomeGroup has been updated in Windows 8 to display in the navigation pane the user profile photo of each member sharing content in the homegroup; in Windows 7, only a generic user icon for each user was displayed in the navigation pane.

Windows 8 ships with Internet Explorer 10, which can run as either a desktop program (where it operates similarly to Internet Explorer 9), or as an app with a new full-screen interface optimized for use on touchscreens. Internet Explorer 10 also contains an integrated version of Flash Player, which will be available in full on the desktop, and in a limited form within the "Metro" app.[87]

Windows 8.1 ships with Internet Explorer 11[6][26] which includes tab syncing, WebGL and SPDY support, along with expanded developer tools. The Metro version also adds access to favorites and split-screen snapping of multiple tabs;[6][88][89][90] an additional option to always display the address bar and tabs is also available.[91] The Metro version can also detect and highlight phone numbers on a web page and turn them into clickable links that, when clicked, initiate a call with a compatible app such as Skype.[92]

The new Task Manager in Windows 8 offers a detailed look at how system resources are being used

Windows 8 includes an overhauled version of Task Manager, which features the following changes:[93]

• Task Manager defaults to a simple view which only displays a list of computer programs with a window. The expanded view is an updated version of the previous Task Managers with several tabs.
• Resource utilization in the Processes tab is shown using a heat map, with darker shades of yellow representing heavier use.
• The Performance tab is split into CPU, memory, disk, Ethernet, and wireless network (if applicable) sections. There are overall graphs for each, and clicking on one reaches details for that particular resource
  • The CPU tab no longer displays individual graphs for every logical processor on the system by default. It may show data for each NUMA node.
  • The CPU tab displays simple percentages on heat-mapping tiles to display utilization for systems with many (64 or more, up to 640) logical processors.[94] The color used for these heat maps is blue, with darker color again indicating heavier utilization
  • Hovering the cursor over any logical processor's graph shows the NUMA node of that processor and its ID.
• The new Startup tab lists startup programs and their impact on boot time. Windows Vista included a feature to manage startup applications that was removed in Windows 7.[95]
• The Processes tab now lists application names, application status, and overall usage data for CPU, memory, hard disk, and network resources for each process. A new option to restart File Explorer upon its selection is provided.
  • Task manager recognizes when a Windows Runtime application is in "Suspended" status.
  • The process information found in the Processes tab of the older Task Manager can be found in the Details tab.

Windows 8 introduces a revised virtual (also known as on-screen) keyboard interface optimized for touchscreen devices that includes wider spacing between keys and is designed to prevent common typing errors that occur while using touchscreens.[96] Pressing and holding down a key reveals related keys which can be accessed via a press or swipe,[96] and suggestions for incomplete words are available.[97] Emoji characters are also supported.[96] Windows 8.1 introduces the ability to swipe the space bar in the desired direction of a suggested word to switch between on-screen suggestions.[97]

Windows 8.1 Update introduces a new gesture that allows users to tap twice and hold the second tap to drag and drop highlighted text or objects.[41] A visible option to hide or show the virtual keyboard is also available.

Windows 8 displays a "peek" button for password text boxes which can optionally allows users to view passwords as they are entered in order to ensure that they are typed correctly.[98] The feature can be disabled via Group Policy.

File History is a continuous data protection component. File History automatically creates incremental backups of files stored in Libraries, including those for users participating in a HomeGroup, and user-specified folders to a different storage device (such as another internal or external hard drive, Storage Space, or network share). Specific revisions of files can then be tracked and restored using the "History" functions in File Explorer. File History replaces both Backup and Restore and Shadow Copy (known in Windows Explorer as "Previous Versions") as the main backup tool of Windows 8.[99] Unlike Shadow Copy, which performs block-level tracking of files, File History utilizes the USN Journal to track changes, and simply copies revisions of files to the backup location.[100] Unlike Backup and Restore, File History cannot back up files encrypted with EFS.[101]

Windows 8 adds native support for USB 3.0, which allows for faster data transfers and improved power management with compatible devices.[102][103] This native stack includes support for the newer, more efficient USB Attached SCSI (UAS) protocol,[104][105] which is turned on by default even for USB 2.0 devices,[106] although these must however have supporting firmware/hardware to take advantage of it. Windows 8.1 enhanced support for power saving features of USB storage devices, but this addition was not without problems, with some poorly implemented hardware degrading user experience by hangs and disconnects.[107]

Support for Advanced Format hard drives without emulation is included for the first time.[108]

A port of Windows for the ARM architecture was also created for Windows 8. Known as Windows RT, it is specifically optimized for mobile devices such as tablets. Windows RT is only able to run third-party Windows Store apps, but comes with a preinstalled version of Office 2013 specially redesigned for touchscreen use.[109]

Windows 8.1 improves hardware support with DirectX 11.2.[110]

Windows 8.1 adds native support for NVM Express.

Windows 8 adds support for UEFI Secure Boot, and TPM 2.0.

Alongside the existing WinPE-based Windows Setup (which is used for installations that are initiated by booting from DVD, USB, or network), Upgrade Assistant is offered to provide a simpler and faster process for upgrading to Windows 8 from previous versions of Windows. The program runs a compatibility check to scan the device's hardware and software for Windows 8 compatibility, and then allows the user to purchase, download, generate installation media with a DVD or USB flash drive and install Windows 8. The new installation process also allows users to transfer user data into a clean installation of Windows.[111][112] A similar program, branded as Windows 8 Setup, is used for installations where the user already has a product key.[113]

Windows 8 implements OEM Activation 3.0, which allows Microsoft to digitally distribute Windows licenses to original equipment manufacturers (OEMs). Windows 8 devices store product keys directly in firmware rather than printed on a Certificate of Authenticity (CoA) sticker. This new system is designed to prevent OEM product keys from being used on computers they are not licensed for, and also allows the installer to automatically detect and accept the product key in the event of re-installation.[114][115]

Windows 8.1 Update adds a new installation mode known as "WIMBoot", where the WIM image that contains the Windows installation is left compressed rather than being extracted, and the system is configured to use files directly from within the system image. This installation method was primarily designed to reduce the footprint of the Windows installation on devices with small amounts of storage. The system image also doubles as the recovery image, speeding up Refresh and Reset operations.[116] It is only supported in systems with a Unified Extensible Firmware Interface (UEFI), where Windows is located on a solid-state drive or eMMC.[117]

Windows 8 incorporates improved support for mobile broadband as a "first-class" method of internet connectivity. Upon the insertion of a SIM card, the operating system will automatically determine the user's carrier and configure relevant connection settings using an Access Point Name database. The operating system can also monitor mobile data usage, and changes its behavior accordingly to reduce bandwidth use on metered networks. Carriers can also offer their own dedicated Windows Store apps for account management, which can also be installed automatically as a part of the connection process. This functionality was demonstrated with an AT&T app, which could also display monthly data usage statistics on its live tile. Windows 8 also reduces the need for third-party drivers and software to implement mobile broadband by providing a generic driver, and by providing an integrated airplane mode option.[118][119]

Windows 8 supports geolocation.[120][121] Windows 8.1 adds support for NFC printing,[122] mobile broadband tethering,[122] auto-triggered VPN[122] and geofencing.[123]

Windows 8.1 Update provides options for the "Network" Settings charm to show the estimated data usage for a selected network, and to designate a network as a metered connection.[47]

The default Windows 8 boot screen; OEMs can replace the Windows logo above the throbber with their own logo in firmware

Windows 8 defaults to a "Fast startup" mode; when the operating system is shut down, it hibernates the kernel, allowing for a faster boot on the subsequent startup.[124] These improvements are further compounded by using all processor cores during startup by default.[125] To create a more seamless transition between the Power-on self-test and Windows startup process, manufacturers' logos can now be shown on the Windows boot screen on compatible systems with UEFI.[126]

The Advanced Startup menu now uses a graphical interface with mouse and touch support in place of the text-based menu used by previous versions. As the increased boot speed of devices with UEFI can make it difficult to access it using keyboard shortcuts during boot, the menu can now be launched from within Windows—using either the PC Settings app, holding down Shift while clicking the Restart option in the Power menu, or by using the new "-o" switch on shutdown.exe.[126][127] though the legacy version of the Advanced Startup menu can still be enabled instead.[128]

UEFI firmware can be exposed to Windows via class drivers. Updated firmware capsules can be distributed as an update to this "driver" in a signed package with an INF file and security catalog, similarly to those for other devices. When the "driver" is installed, Windows prepares the update to be installed on the next boot, and Windows Boot Manager renders status information on the device's boot screen.[129]

Windows 8 includes WDDM 1.2 and DirectX Graphics Infrastructure (DXGI) 1.2. The Desktop Window Manager now runs at all times (even on systems with unsupported graphics cards; where DWM now also supports software rendering), and now also includes support for stereoscopic 3D content.[130]

Other major features include preemptive multitasking with finer granularity (DMA buffer, primitive, triangle, pixel, or instruction-level),[131] reduced memory footprint, improved resource sharing, and improved timeout detection and recovery. 16-bit color surface formats (565, 5551, 4444) are mandatory in Windows 8, and Direct3D 11 Video supports YUV 4:4:4/4:2:2/4:2:0/4:1:1 video formats with 8, 10, and 16-bit precision, as well as 4 and 8-bit palettized formats.[132] Display-only and render-only WDDM drivers were also supported. Display-only WDDM drivers allow basic 2D-only video adapters and virtual displays to function while contents are rendered by existing renderers or a software rasterizer. Render-only WDDM drivers will render screen contents to specified display processors, commonly seen on laptops with dedicated GPUs. Otherwise, a full graphics WDDM driver will function as both of the display and rendering.[133]

Windows 8.1 introduces WDDM 1.3[134] and adds support for Miracast, which enables wireless or wired delivery of compressed standard- or high-definition video to or from desktops, tablets, mobile phones, and other devices.[122]

Windows 8 adds support for printer driver architecture version 4. This adds a Metro friendly interface as well as changes the way the architecture was written.[135]

Windows 8.1 adds support for Wi-Fi Direct printing,[122] NFC printing,[122] and native APIs for 3D printing through the XML-based 3D Manufacturing Format (3MF).[136][137]

Windows PowerShell is Microsoft's task automation framework, consisting of a command-line shell and associated scripting language built on .NET Framework. PowerShell provides full access to COM and WMI, enabling administrators to perform administrative tasks on both local and remote Windows systems. Windows 8 includes Windows PowerShell v3.0.[138] Windows 8.1 comes with Windows PowerShell v4.0 which features a host of new commands for managing the Start screen, Windows Defender, Windows components, hardware and network.[139]

Bootable Windows To Go USB flash drive

Windows To Go is a feature exclusive to the Enterprise version of Windows 8 which allows an organization to provision bootable USB flash drives with a Windows installation on them, allowing users to access their managed environment on any compatible PC.[140][141][142][143] Windows 8.1 updates this feature to enable booting from a USB composite device with a storage and a smart card function.[144]

Address space layout randomization (ASLR) introduced in Windows Vista[151] was improved in Windows 8[152] and has been updated in Windows 8.1 to allow randomization to be unique across devices.[153]

Windows 8 introduces virtual smart card support. A digital certificate of a smart card can be stored onto a user's machine and protected by the Trusted Platform Module, thereby eliminating the need for the user to physically insert a smart card, though entering a PIN is still required. Virtual smart card support enables new two-factor authentication scenarios.[152] Windows 8.1 improves this functionality by simplifying the device enrollment process for virtual smart cards and introduces additional virtual smart card functionality such as certificate attestation for Metro-style applications,[153] and enrollment and management features via WinRT APIs.[154]

Windows 8.1 features pervasive support for biometric authentication throughout the operating system,[155] includes a native fingerprint registration feature,[156] and enables the use of a fingerprint for tasks such as signing into a device, purchasing apps from the Windows Store, and consenting to authentication prompts (e.g., User Account Control). Windows 8.1 also introduces new WinRT APIs for biometrics.[154][156][157]

On Windows RT, logging in with a Microsoft account automatically activates passive device encryption, a feature-limited version of BitLocker which seamlessly encrypts the contents of mobile devices to protect their contents. On Windows 8.1, device encryption is similarly available for x86-based Windows devices, automatically encrypting user data as soon as the operating system is configured. When a user signs in with a Microsoft account or on a supported Active Directory network, a recovery key is generated and saved directly to the user's account. Unlike BitLocker, device encryption on x86-based devices requires that the device meet the Connected Standby specifications (which among other requirements, requires that the device use solid state storage and have RAM soldered directly to the motherboard) and have a Trusted Platform Module (TPM) 2.0 chip.[158][159]

Windows 8.1 introduces Assigned Access, formerly called Kiosk mode, which restricts the Windows device to a running a single predetermined Metro-style app.[160][161][162]

Windows 8.1 was slated to include a Provable PC Health feature which would allow owners to subject devices connected to a network to remote PC analysis. Under Provable PC Health, connected devices would periodically send various configuration-related information to a cloud service, which would provide suggestions for remediation upon detection of an issue.[153] However, the feature was dropped before the operating system's general availability.[163]

Windows 8 integrates Windows Live Family Safety into the operating system, allowing parents to restrict user activity via web filtering, application restriction, and computer usage time limits.[164][165][166] Certain parental controls functionality introduced in Windows Vista was made unavailable in Windows 7 in favor of Windows Live Family Safety.[167] A notable change in Family Safety is that administrators can now specify time periods for computer usage. For example, an administrator can restrict a user account so that it can only remained signed in for a total time period of one hour. In previous versions of Windows, administrators could only restrict accounts based on the time of day.[168]

Protected processes introduced in Windows Vista for digital rights management have been extended in Windows 8.1 to support additional scenarios along with a new Protected Process Light scheme. In Windows Vista, processes for digital rights management were either protected or unprotected. With the new scheme in Windows 8.1, processes can be assigned varying levels of protection, and core operating system components such as the Local Security Authority Subsystem Service can be protected by this scheme to prevent reading memory and code injection by non-protected processes.[169]

Windows 8 introduced four new features to offer security during the startup process: UEFI secure boot, Trusted Boot, Measured Boot and Early Launch Anti-Malware (ELAM).[170][171]

Of the four, secure boot is not a native feature of Windows 8; it is part of UEFI. At startup, the UEFI firmware checks the validity of a digital signature present in the Windows Boot Loader (bootmgfw.efi), which is signed with Microsoft's public key. This signature check happens every time the computer is booted and prevents malware from infecting the system before the operating system loads.[172] The UEFI firmware will only allow signatures from keys that has been enrolled into its database, and, prior to Windows 8 release, Microsoft announced that certified computers had to ship with the Microsoft's public key enrolled and with secure boot enabled by default. However, following the announcement, the company was accused by critics and free and open-source software advocates (including the Free Software Foundation) of trying to use the secure boot to hinder or outright prevent the installation of alternative operating systems such as Linux. Microsoft denied that the secure boot requirement was intended to serve as a form of lock-in, and clarified that x86 certified systems (but not ARM systems) must allow secure boot to enter custom mode or be disabled.[173][174]

Trusted Boot is a feature of Windows boot loader and ensures the integrity of all Microsoft components loaded into memory, including ELAM, which loads last. ELAM ensures that all third-party boot drivers are trustworthy; they are not loaded if ELAM check fails. ELAM can use either Windows Defender or a third-party compatible antivirus.[170] During the 2011 Build conference in Anaheim, California, Microsoft showed a Windows 8 machine that can prevent an infected USB flash memory from compromising the boot process.[175][176]

Measured Boot can attest to the state of a client machine by sending details about its configuration to a remote machine. The feature relies on the attestation feature of the Trusted Platform Module and is designed to verify the boot integrity of the client.[177]

Windows Platform Binary Table allows executable files to be stored within UEFI firmware for execution on startup. Microsoft states this feature is meant to "allow critical software to persist even when the operating system has changed or been reinstalled in a 'clean' configuration"; specifically, anti-theft security software; but this has also been mis-used, including by Lenovo with their "Lenovo Service Engine" feature.[178][179]

In Windows 7, Windows Defender was an anti-spyware solution. Windows 8 introduced Windows Defender as an antivirus solution (and as the successor of Microsoft Security Essentials), which provides protection against a broader range of malware. It was the first time that a standard Windows install included an antivirus solution.[180]^: 53 Windows 8.1 augments it with network behavior monitoring, a new feature for Windows Defender.[180]^: 53 For Microsoft Security Essentials, this feature has been present since July 2010.[181]

Storage Spaces is a storage virtualization technology which succeeds Logical Disk Manager and allows the organization of physical disks into logical volumes similar to Logical Volume Manager (Linux), RAID1 or RAID5, but at a higher abstraction level.[186]

A storage space behaves like a physical disk to the user, with thin provisioning of available disk space. The spaces are organized within a storage pool, i.e. a collection of physical disks, that can span multiple disks of different sizes, performance or technology (USB, SATA, SAS). The process of adding new disks or replacing failed or older disks is fully automatic, but can be controlled with PowerShell commands. The same storage pool can host multiple storage spaces. Storage Spaces have built-in resiliency from disk failures, which is achieved by either disk mirroring or striping with parity across the physical disks. Each storage pool on the ReFS filesystem is limited to 4 PB (4096 TB), but there are no limits on the total number of storage pools or the number of storage spaces within a pool.[187]

A review in Ars Technica concluded that "Storage Spaces in Windows 8 is a good foundation, but its current iteration is simply too flawed to recommend in most circumstances."[188] Microsoft MVP Helge Klein also criticized Storage Spaces as unsuitable for its touted market of SOHO users.[189]

Storage Spaces was further enhanced in Windows Server 2012 R2 with tiering and caching support,[190] which can be used for caching to SSD;[191] these new features were not added to Windows 8.1. Instead Windows 8.1 gained support for specific features of SSHD drives, e.g. for host-hinted LBA caching (TP_042v14_SATA31_Hybrid Information).[192]

Windows 8.1 gained support for NVM Express (NVMe), a new industry standard protocol for PCIe-attached storage, such as PCIe flash cards.[192][193]

Windows 8.1 also supports the TRIM command for PCI Express SSDs based on NVMe (Windows 7 supported TRIM only for AHCI/SATA) drives and only the ones which were connected internally via the M.2 or SATA/IDE connectors. Windows 8.1 supports the SCSI unmap command which is a full analog of the SATA TRIM command for devices that use the SCSI driver stack. If external SSD drives as well as the device firmware in the bridge chip both support TRIM, Windows 8.1 can perform a TRIM operation on these external SATA and NVMe SSDs that connect via USB as long as they use the USB Attached SCSI Protocol (UASP).

Windows 8.1 also introduces a manual TRIM function via Microsoft Drive Optimizer which can perform an on-demand user-requested TRIM operation on internal and external SSDs. Windows 7 only had automatic TRIM for internal SATA SSDs built into system operations such as Delete, Format, Diskpart etc.