Windows 11 KB5120998 Reaches Release Preview With Admin Protection

Windows 11 KB5120998 is now rolling out to the Release Preview Channel with administrator protection, Windows Share improvements, reliability fixes, and the removal of WMIC.

Microsoft released Windows 11 Builds 26100.9267 and 26200.9267 (KB5120998) for Windows 11 24H2 and 25H2. The update also introduces Taskbar and Start Menu improvements, alongside several security, setup, and performance changes.

The update is available as Build 26100.9267 for Windows 11 24H2 and Build 26200.9267 for Windows 11 25H2. Microsoft is rolling out some of the new features gradually.

Administrator protection starts rolling out

Administrator protection is beginning to reach Release Preview users with KB5120998.

The feature uses just-in-time administrative privileges instead of keeping users permanently elevated. Microsoft is also adding profile separation to reduce the risk from privilege-escalation attacks.

Administrator protection remains disabled by default, and Microsoft says it does not represent a formal security boundary.

Organizations can enable the feature through Microsoft Intune using OMA-URI policies or through Group Policy.

With exploits such as the recently patched LegacyHive vulnerability targeting privilege escalation, the additional administrator protections arrive at a useful time.

Windows Share can suggest and install apps

Microsoft is also improving Windows Share for work and school users.

Users can now discover and install relevant applications directly from the Windows Share interface. Suggested apps can be managed under Settings > System > Share.

Performance and reliability improvements

KB5120998 includes several fixes aimed at everyday Windows reliability.

Switching between virtual desktops should feel smoother, while Microsoft has improved the reliability of Display settings and Task Manager app history.

Windows should also preserve brightness settings more reliably after Energy Saver turns off.

Microsoft also fixed VPN-related background issues that could cause some processes to stop responding.

Windows Setup gets several changes

Windows Setup now makes it easier to skip selecting a secondary keyboard during installation.

The Get Started app also gains new pages covering app installation, website pinning, and Windows themes.

Windows Update now restores sleep state

Microsoft has changed how Windows behaves when users manually put their PC to sleep before an update.

After the update finishes, the computer will return to sleep automatically. The behavior also applies when automatic sleep is configured as Never.

Input improvements arrive for IME and voice typing

Microsoft improved the reliability of the Japanese IME in this Release Preview update.

Voice typing should also remember automatic punctuation and launcher settings more consistently between sessions.

Windows 11 adds standalone ML-KEM support

Windows 11 can now use ML-KEM as a standalone algorithm for TLS key exchange.

Microsoft previously supported ML-KEM through hybrid cryptographic groups, but KB5120998 expands how the post-quantum cryptography algorithm can be used.

Microsoft removes WMIC from Windows 11

Starting in August 2026, Windows 11 24H2 and 25H2 no longer include the Windows Management Instrumentation Command-line utility, better known as WMIC.

Microsoft has also removed WMIC as a Feature on Demand, meaning users can no longer restore it through that mechanism.

The underlying Windows Management Instrumentation technology remains supported, so applications and management tools that rely on WMI itself can continue using it.