Windows 11 KB5124006 Adds Administrator Protection, Agentic Security, ML-KEM, and More

The latest update for Windows 11 version 26H1 has been released under KB5124006, and it introduces Administrator protection. The feature uses just-in-time privileges and profile separation to help protect administrative access. The feature is disabled by default and can be enabled through Microsoft Intune or Group Policy.

Microsoft is also introducing Process Isolation for Microsoft Execution Containers, designed for workloads such as coding agents and model-generated code. Windows can restrict access to files, networking, the UI and other operating system resources according to policy.

The update adds preview support for agentic process identifiers, allowing Windows to track an agent identifier through child processes and pass it to Web Account Manager during authentication.

On the cryptography side, ML-KEM can now be used as a standalone post-quantum cryptography algorithm for TLS key exchange.

More Windows 11 changes are packed into KB5124006

Microsoft has also improved virtual desktop switching, Display settings reliability, brightness persistence after Energy Saver turns off, and Task Manager’s app history information.

Windows Setup gets an easier secondary keyboard selection process, while the Get Started app gets new pages for app installation, site pinning and themes.

Windows Update now handles manually sleeping PCs differently after an update, allowing them to return to sleep even when automatic sleep is set to Never. Supported apps can also coordinate their updates with Windows Update through Microsoft’s Windows Update Orchestration Platform.

Finally, the Microsoft Store gains support for in-app purchases in packaged WinUI 3 apps that require elevation.