Microsoft has officially rolled out a significant update for Windows 11 Insiders in the Beta Channel. The new Build 26220.7752 (KB5074177) introduces native support for the powerful security tool Sysmon and addresses nagging File Explorer glitches. This update is based on the Windows 11 version 25H2 codebase.
It is available right now for testers and IT professionals.
This release marks a major shift in how Microsoft handles advanced system monitoring tools. It also cleans up reliability issues that have frustrated users relying on cloud storage integration.
Native Sysmon Support Arrives
The headline feature of this update is the integration of System Monitor directly into the operating system. Security professionals know this tool as Sysmon.
Previously, users had to download this utility separately from the Sysinternals suite. Now it comes built into Windows 11 by default. This change simplifies the workflow for system administrators and security researchers.
Sysmon is a Windows system service and device driver. It remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to file creation time.
Microsoft has made this feature optional. It is disabled out of the box to save resources for average users. You must manually enable it if you wish to use its capabilities.
Windows 11 native Sysmon security feature integration screen
“Sysmon no longer requires a separate Sysinternals download. It is now a native optional feature ready for deployment.”
How to Enable Sysmon
You can turn on this feature using two distinct methods.
Method 1: Windows Settings
- Navigate to your Settings menu.
- Click on System and then select Optional features.
- Scroll down to More Windows features.
- Locate Sysmon in the list.
- Check the box and click OK to apply the changes.
Method 2: Command Line
For those who prefer speed, you can use PowerShell or Command Prompt.
- Open your terminal as an Administrator.
- Type the following command:
Dism /Online /Enable-Feature /FeatureName:Sysmon - Press Enter.
Once installed, you need to initialize the service. simply run sysmon -i in your command prompt.
Important Note: If you currently have the standalone Sysinternals version installed, you must uninstall it first. This prevents conflicts between the legacy driver and the new native implementation.
Why Native Integration Matters
This move signals Microsoft’s commitment to baking advanced security tools directly into the core OS.
Forensic analysts rely heavily on Sysmon to track malicious activity. It helps identify how intruders move through a network. By making it native, Microsoft ensures that the tool is always compatible with the latest kernel updates.
It removes the friction of maintaining third-party binaries. Updates to Sysmon will likely arrive through Windows Update in the future. This ensures better stability and security for enterprise environments.
The functionality remains identical to the standalone version. Your existing configuration files and threat detection logic will still work. Microsoft plans to add official documentation directly into Windows in a coming update.
Critical Fixes for File Explorer
Build 26220.7752 is not just about security. It also targets usability issues that have plagued the Beta Channel.
Microsoft has deployed fixes for the File Explorer that improve daily workflows. These changes are rolling out gradually.
Key Explorer Improvements:
- Keyboard Navigation: Users can now navigate folders more reliably using keyboard shortcuts.
- Renaming Folders: A bug preventing the renaming of folders with custom names is now resolved.
- Favorites Menu: Missing icons and tooltips in the “Add to favorites” section are back.
These fixes address the “death by a thousand cuts” feeling that buggy interface elements create. A smooth File Explorer is essential for a positive Windows experience.
Enhancing App Reliability
The update also tackles performance issues related to cloud storage services.
A specific bug caused applications to freeze when accessing files on OneDrive or Dropbox. This was a severe issue for productivity. Users reported that apps would hang indefinitely while waiting for cloud data to sync.
Outlook Stability:
- Users with PST files stored on OneDrive faced constant reloading.
- The application would often freeze during data retrieval.
- This update resolves those specific conflict triggers.
These improvements ensure that your workflow remains uninterrupted. Reliability is a key focus for the 25H2 version cycle.
Voice Access Expands to Dutch
Accessibility is another pillar of this release. Voice Access allows users to control their PC using only their voice.
The feature now supports the Netherlands locale. Dutch speakers can now navigate menus, dictate text, and interact with apps without a keyboard or mouse.
This expansion opens up Windows 11 to a broader audience. It reflects Microsoft’s goal of inclusive design. No other language changes were noted in this specific build.
Summary of Changes
This Beta Channel update brings a mix of high-level security tools and necessary bug squashing.
Sysmon integration is a win for IT admins and security teams. The File Explorer fixes will make the daily drive smoother for everyone else. The resolution of OneDrive freezing issues is particularly welcome for business users.
We recommend installing KB5074177 immediately if you are in the Beta Channel. It bridges the gap between third-party utilities and native OS features. It also stabilizes the platform ahead of the wider release.
We want to hear from you. Are you planning to use the native Sysmon tool? Or are you just happy that Explorer stops crashing?
Please let us know your thoughts in the comments below. If you are discussing this on social media, use the hashtag #WindowsInsider to join the conversation.
