New Windows 11 Update (28020.1611) Adds Built-In Sysmon and OneDrive Sharing Tweaks

Дата публикации: 13-02-2026 08:04:11

Microsoft is rolling out Windows 11 Insider Preview Build 28020.
Thank you for being a Ghacks reader. The post New Windows 11 Update (28020.1611) Adds Built-In Sysmon and OneDrive Sharing Tweaks appeared first on gHacks.

Основное содержимое страницы с новостью.

Microsoft is rolling out Windows 11 Insider Preview Build 28020.1611 (KB5077221) to the Canary Channel. As expected with Canary builds, this release focuses on early platform changes and experimental features. Windows 11 gets built-in Sysmon and sharing improvements in thew new KB28020.1611 build.

There’s also a small known issue: the desktop watermark currently shows the wrong build number, which Microsoft says will be corrected in an upcoming build.

While you can check the previous update, here are all the new improvements in Canary Build 28020.1611

Windows 11 Insider Preview Build 28020.1611 (Canary Channel)

One of the biggest additions in Windows 11 KB5077221 build is native Sysmon support.

Previously available as a separate Sysinternals download, Sysmon (System Monitor) is now integrated directly into Windows as an optional feature. IT professionals and security teams widely use Sysmon to monitor detailed system activity for threat detection.

What Sysmon Does?

Sysmon captures and logs system-level events, including:

• Process creation
• Network connections
• File changes
• Driver loading activity

These events are written to the Windows Event Log, where they can be analyzed by security tools or SIEM platforms.

How to Enable Built-In Sysmon?

Sysmon is disabled by default and must be manually enabled. You can activate it through:

Settings path:

Settings > System > Optional features > More Windows features > Enable Sysmon

Or via command line:

Then complete installation with:

Important: If you previously installed Sysmon manually from the Sysinternals website, you must uninstall it before enabling the built-in version.

Microsoft notes that Sysmon’s functionality remains unchanged — it is simply now part of Windows itself.

Improves OneDrive Sharing in Windows Share

Build 28020.1611 also enhances the Windows Share experience for OneDrive users.

When right-clicking a OneDrive cloud file and selecting Share, clicking Copy link now provides additional options under “Share using”, allowing the link to be sent directly through other apps.

This update is currently rolling out to:

• Windows Insiders signed in with a Microsoft account
• Users outside the European Economic Area (EEA)

The change aims to make sharing cloud content faster and more seamless within Windows.

28020.1611 General Fixes

• The desktop watermark has been corrected to display the proper build number (though some users may still see the incorrect one temporarily).

Reminders for Windows Insiders in the Canary Channel

As a reminder, Canary Channel builds:

• Represent early platform changes
• May be unstable
• May include features that never ship publicly
• Often roll out features gradually using Controlled Feature Rollout (CFR)

Switching off the Canary Channel requires a clean installation of Windows 11, as users cannot move to lower build channels without reinstalling.

Microsoft also notes that some features may appear in Dev or Beta channels before arriving in Canary.

What KB5077221 Build Signals?

The KB5077221 integration of Sysmon into Windows marks a notable shift. Bringing a security monitoring tool directly into the OS lowers friction for enterprises and users who care about security.

While Canary builds aren’t meant for everyday systems, Build 28020.1611 gives an understanding of how Microsoft continues to strengthen Windows 11’s security and cloud integration.

More documentation on built-in Sysmon will be posted soon.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Windows 11 26H1 arrives only for new ARM computers	0	11.47	11-02-2026
2	Windows 11 New Build Adds Screen Tint, Voice Isolation, and Plug-and-Play Braille Display Support	0	10.62	25-05-2026
3	Windows 11 Version 26H2 Ships as an Enablement Package With No New Features Over 25H2	0	6.88	20-07-2026
4	Microsoft Releases Emergency Windows 11 Hotpatch to Fix Remote Code Execution Flaw	0	8.64	15-03-2026
5	Microsoft Tests Cloud Rebuild Recovery Option in Windows 11 Insider Builds	0	5	07-07-2026
6	Microsoft Blocks Windows 11 KB5101650 Update on Some Dell Devices Over Shutdown Issue	0	9.61	16-07-2026
7	Microsoft Adds Dedicated Taskbar Resize Option to Windows 11 in Latest Experimental Build	0	5	01-07-2026
8	Windows 11 Insider Build 26220.8925 Adds Touchpad Scroll Speed Controls and Start Menu Section Toggles	0	10.2	22-07-2026
9	Windows 11 is quietly installing OneDrive Photos, and it wants to scan your photos for faces if you allow it	0	5.94	29-07-2026
10	Microsoft Confirms Windows 11 Bug That Can Consume Over 500GB of Storage Through Permission Log File	-2	6	08-07-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 15.31. Источник: www.ghacks.net.