KB5079382

Microsoft released cumulative update KB5079382 for Windows 11, version 25H2 for insiders on the Beta Channel – Windows 11 Insider Preview Quality Update (26220.7961). A preview build of Windows 11 Insider Preview Build 26220.7961 (KB5079382) was released. Users on this channel will now receive Windows 11, version 25H2 updates, which are available using the enablement package KB5066383 (build 26220.xxx).

• Administrator Protection. In Windows 11 Insider Preview Build 26220.7961 (Beta Channel), Microsoft re-enables the Administrator Protection feature. It is designed to protect user administrative rights and reduce risks associated with the constant presence of administrator rights in the system. The feature uses a just-in-time model for granting administrator privileges. A user with administrator rights can still perform all administrative tasks, but the privileges themselves are activated only while a specific operation is being performed. This approach reduces the likelihood of administrative rights abuse and improves system security. The feature is disabled by default. Administrators can enable it via OMA-URI in Microsoft Intune or through Group Policies.
• File Sharing (Drag tray improvement). Based on user feedback, Microsoft has refined the Drag tray interface. A more compact peek view is now used, reducing the chance of the tray appearing accidentally and making it easier to close when working near the top of the screen.
• File Explorer – voice input when renaming. When renaming files in File Explorer, you can now use voice input (Win + H).
• File Explorer – fixing white flashes. Fixed a white flash when opening new File Explorer windows or tabs if it is set to open the "This PC" section. Also fixed white flashes when resizing File Explorer interface elements.
• File Explorer – preview reliability. Improved reliability of unlocking files downloaded from the internet so they can be correctly viewed in the File Explorer preview pane.

Installation via Windows Update: go to Settings > Windows Update and click Check for updates. A computer restart is required to complete the installation.

How the new features work:

Administrator Protection: The feature uses a just-in-time (JIT) model for granting admin privileges. When a process requests elevated access, the system via consent.exe temporarily issues a full-privilege token only for that operation. After completion, the token is revoked. Enabling via OMA-URI or Group Policies adds keys in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.

File Sharing (Drag tray improvement): The improved drag tray interface relies on gesture sensors inside explorer.exe. Instead of a persistent panel, a compact peek view appears with a ~300 ms timeout. If the cursor exits the screen’s top edge before activation, the pop-up auto-closes, reducing false triggers.

File Explorer – voice input when renaming: This uses Windows Speech Recognition APIs (ISpRecognizer). Pressing Win + H activates the microphone, speech is converted to text via cloud or local engine, then injected into the active rename edit field using SendInput().

File Explorer – fixing white flashes: White flashes occurred due to a delay between drawing the window background (#32770 class) and loading the theme. The fix forces dwm.exe to apply the theme before folder rendering. For "This PC", buffered rendering with WS_EX_COMPOSITED eliminates artifacts during resizing.

File Explorer – preview reliability: Fixed PreviewHandler behavior for internet-downloaded files. Previously, the ZoneIdentifier attribute (zone 3 = internet) blocked metadata reading. Now explorer.exe safely calls UnblockFile() inside an AppContainer sandbox before rendering the preview.

The last 10 Windows updates: