Microsoft is creating new capabilities that will let security vendors operate outside of the root of Windows operating systems.