Microsoft Introduces New Driver to Lock Down Default Browser Settings
February 11, 2024
By [Your Name], Staff Writer
Overview
Microsoft, the technology giant, has quietly introduced a new Windows driver that prevents users from manually or programmatically changing the default browser settings on Windows 10 and Windows 11. The driver, included in the February updates, restricts the modification of certain Registry keys, effectively locking down default browser preferences.
New Driver Locks Down Default Browser Settings
The driver, known as the User Choice Protection Driver (UCPD.sys), was discovered by IT consultant Christoph Kolbicz. Kolbicz noticed the change when his programs, SetUserFTA and SetDefaultBrowser, suddenly stopped functioning. SetUserFTA and SetDefaultBrowser were command line programs designed to allow Windows administrators to change file associations and default browser settings.
The new driver, implemented by Microsoft as part of the February updates, prevents direct editing of the Registry keys associated with HTTP and HTTPS URL associations and the .PDF file association. These keys are crucial in determining the default programs for specific file types or URL protocols.
Registry key modification has been a popular method to alter default programs in Windows, and software like SetUserFTA and SetDefaultBrowser leveraged this functionality. However, the new driver restricts the editing of these Registry keys, preventing unauthorized changes.
Possible Reasons and Implications
Possibly related to DMA compliance
There is speculation that this change may be to comply with Europe’s Digital Markets Act (DMA). The DMA aims to promote fair competition and prevent anti-competitive practices by designated “gatekeepers,” which include Alphabet, Amazon, Apple, ByteDance, Meta, and Microsoft. Microsoft, along with other companies, had until March to comply with these regulations. In anticipation of the DMA, Microsoft had already outlined changes coming to Windows in March 2024 to comply with the new regulations, including default browser policies in the European Economic Area. However, the roll-out of the new driver to non-EEA devices raises doubts about this theory.
Disabling the User Choice Protection Driver
Christoph Kolbicz has discovered that the User Choice Protection Driver can be disabled by modifying the Registry and removing or disabling a scheduled task. The specific steps to disable the driver are as follows:
1. Open an elevated PowerShell and run the command: New-ItemProperty -Path “HKLM:SYSTEMCurrentControlSetServicesUCPD” -Name “Start” -Value 4 -PropertyType DWORD -Force. This action will bring back the functionality of SetUserFTA but will require administrative permissions and a system reboot.
2. However, it’s important to note that a scheduled task called “UCPD velocity” will automatically re-enable the driver if it is disabled. To prevent this, the scheduled task under MicrosoftWindowsAppxDeploymentClient must be deleted or disabled.
Microsoft’s Response
Inquiries made to Microsoft regarding the lockdown of these Registry keys have not yielded any information. Microsoft has stated that they have no current comments to share regarding this matter.
