KB5079473 (build 26200.8037) for Windows 11 drops as the March 2026 update

• Windows 11 builds 26200.8037 and 26100.8037 (KB5079473) are available in the Stable Channel as the March 2026 Security Update for versions 25H2 and 24H2.
• This release includes a new speed tester, camera pan and tilt support, Sysmon native support, and other visual changes.
• This security update also ships with various fixes, improvements, and changes.

Microsoft is rolling out Windows 11 builds 26200.8037 and 26100.8037 (KB5079473) in the Stable Channel as the security update for March 2026. The rollout is available starting March 10, 2026, and the company usually starts the deployment at 1PM Eastern Time.

According to the official changelog, the 2026-03 Security Update (KB5079473) (Build 26200.8037) introduces a new network speed test integration in the Taskbar, native Pan and Tilt support for compatible cameras, built-in support for Sysmon, and the ability to set WebP images as desktop backgrounds.

Update KB5079473 also delivers recovery environment improvements, refinements to the Start menu, updates for Microsoft Entra ID integration, and multiple fixes and design updates across Storage and Windows Update settings.

In addition, this release for Windows 11 ships with an updated version of File Explorer that includes several usability and reliability enhancements, along with improvements to Nearby Sharing, Projecting, Display behavior, the Lock screen experience, and other core system components.

Related

How to enable new features for Windows 11 March 2026 Update (KB5079473)

KB5077181 (build 26200.7840) for Windows 11 drops as the February 2026 update

Windows 11 feature history for 2026: every change, month by month

KB5078885 (build 19045.7058) for Windows 10 ESU drops as the March 2026 update

• What’s new on Windows 11 25H2 and 24H2 update KB5079473
• What’s new on Windows 11 23H2 update KB5078883
• Windows 11 March 2026 Patch Tuesday – Manual installation process
• Windows 11 March 2026 Patch Tuesday – Update history

What’s new on Windows 11 25H2 and 24H2 update KB5079473

Microsoft is currently rolling out these improvements and fixes as part of the March 2026 Security Update for Windows 11 24H2 and version 25H2.

Quick Machine Recovery new behavior

Quick Machine Recovery (QMR) now activates by default on the “Pro” edition of Windows 11 for non-domain-joined computers that are not enrolled in enterprise endpoint management. These systems receive the same automated recovery protections as Windows 11 Home.

For domain-joined or enterprise-managed devices, QMR remains disabled unless an organization chooses to enable it.

Speed test in the Taskbar

Starting with builds 26200.8037 and 26100.8037, the Taskbar introduces a built-in network speed test. You can launch it from the Wi-Fi or Cellular Quick Settings panel, or by right-clicking the network icon in the system tray. The test opens in your default web browser and measures Ethernet, Wi-Fi, and Cellular connections, making it easier to evaluate performance and diagnose connectivity issues.

Also, when the Taskbar is set to show uncombined buttons, apps with multiple open windows will no longer shift all instances to the overflow menu when space runs out.

Instead, only windows that exceed the available space overflow. This change prevents the overflow area from appearing underutilized and delivers a more accurate visual layout.

Start menu new account benefits option

A new entry in the account menu on the Start menu now links directly to the Microsoft account benefits page. This addition makes it easier to view, explore, and manage the benefits associated with your Microsoft account within the Windows experience.

Microsoft Entra ID new support

Start with this update, the system now supports Microsoft Entra ID group and role SID resolution. In addition, the system can now translate Entra cloud group and role security identifiers into readable names.

This enhancement allows Entra-only groups to appear and function correctly in file permissions, local group memberships, and other access-control scenarios without requiring on-premises or hybrid Active Directory identities.

Camera Pan and Tilt support

Starting with KB5079473, Microsoft is updating the “Cameras” settings to enable pan and tilt on supported cameras. The settings available under the “Basic settings” options are while on the camera’s page.

Sysmon native support

This is a significant shift in Windows 11 endpoint security. For over a decade, Sysmon (System Monitor) has been the gold standard for security professionals, but it required manual installation. However, starting with update KB5079473, the software giant is making Sysmon a native Windows 11 component rather than a standalone Sysinternals tool.

According to the company, Sysmon lets you capture detailed system activity useful for threat detection, and its customizable configuration files allow you to filter exactly which events you want to track.

You can enable the feature from Settings > System > Optional features > More Windows features, checking the “Sysmon” item.

Once you complete the steps, from PowerShell or Command Prompt, run the Sysmon -i command.

Microsoft notes that if you have the web version of Sysmon, you’ll need to uninstall it before installing the new native version.

Widgets improvements

Widget settings now open as a full-page experience within the Widgets app instead of appearing in a dialog.

Desktop background

This update also adds support for the .webp file format for setting desktop background images.

Emoji 16

In this rollout, the development team is also including new emojis from version 16, including face with bags under eyes, fingerprint, leafless tree, root vegetable, harp, shovel, and splatter.

Backup restoration changes

The first sign-in restore experience is now integrated into Windows Backup for Organizations, extending this capability to a broader range of device scenarios. As a result of this enhancement, user settings and Microsoft Store apps are automatically restored the first time a user signs in on Microsoft Entra hybrid-joined devices, Cloud PCs, and multi-user environments.

This addition streamlines device refreshes, upgrades, and transfers by delivering a consistent and predictable setup experience across managed environments.

Windows Search improvements

The Task Manager icon for the search process has been updated to a magnifying glass for clearer identification.

In addition, group headers now display the number of results, making it easier to spot when more items are available.

Finally, you can now preview results by hovering over an item and selecting “Preview” to see its content without opening it.

Storage settings new dialogs

Several dialogs in the Storage settings area have been modernized to match the design language of Windows 11.

File Explorer tweaks

In the March 2026 Security Update, File Explorer adds “Extract All” to the command bar for non‑ZIP archive folders.

Also, fixed an issue where Shift‑clicking or middle‑clicking the taskbar icon could reopen the current instance instead of a new one, and improved reliability when displaying devices on the “Network” page.

Remote Server Administration Tools (RSAT)

This update introduces support for Remote Server Administration Tools (RSAT) Arm64 devices. Network administrators can now deploy and run core management tools directly on Arm-based computers, including Active Directory Domain Services and Lightweight Directory Services Tools, Active Directory Certificate Services Tools, Server Manager, Group Policy Management Tools, DNS Server Tools, and DHCP Server Tools.

RSAT components are offered as optional features. They can be installed from Settings > System > Optional features, or through Control Panel > Programs > Turn Windows features on or off.

Other changes

The company has also released security fixes and improvements for the operating system:

• Windows Update: Increased responsiveness of the Windows Update settings page.
• Sign-in and Lock screens: Improved overall login screen reliability.
• Nearby sharing: Increased reliability when sending larger files.
• Projecting: Improved reliability of the project pane when using the “Windows key + P” keyboard shortcut.
• Printing: Enhanced performance of the Windows print service (spoolsv.exe) to prevent slowdowns during high‑volume printing.
• Display: Reduced resume‑from‑sleep time on heavily loaded systems and improved reliability for docked laptops resuming from sleep when connected to AC power with the lid closed.
• Other: Addressed minor visual issues affecting taskbar auto‑hide behavior, Windows Security credential prompts, and the print dialog.
• Windows System Image Manager: Improves the reliability of selecting trusted catalog files by adding a warning dialog that helps confirm the chosen file comes from a trusted source.
• File Explorer: Improves the reliability of file manager search when searching across multiple drives or within “This PC.”
• Windows Defender Application Control: Improves how WDAC handles COM object allowlisting policies. Previously, COM objects were blocked when the endpoint security policy was set higher than the allowlisting policy, and with this update, COM objects are allowed as expected.

Furthermore, this update continues the rollout of the 2023 Secure Boot certificates for devices with the 2011 certificates expiring in June 2026. You can also apply the Secure Boot certificates manually with these instructions.

Also, this update improves the reliability of BitLocker so that your device no longer stops responding after entering the recovery key.

What’s new on Windows 11 23H2 update KB5078883

The company has also released security fixes and improvements for Windows 11 23H2, as part of the update KB5078883 (build 22631.6783).

• File History: Improves feature reliability. Also, files with names containing Chinese characters and Private Use Area characters now back up successfully, helping keep your files protected and available
• Graphics: Improves stability for certain GPU configurations to help devices shut down more reliably, and enhances reliability for games and 3D apps during intensive graphics use.
• Fonts: Improves the operating system fonts by adding the new Saudi Riyal currency symbol, keeping text clear, accurate, and visually consistent across Windows apps and experiences.
• Windows System Image Manager: Improves the reliability of selecting trusted catalog files by adding a warning dialog that helps confirm the chosen file comes from a trusted source.

This update now includes additional high‑confidence device‑targeting data to expand coverage for devices eligible to automatically receive new Secure Boot certificates. Devices only receive the new certificates after showing sufficient successful update signals, ensuring a controlled, phased rollout.

In addition, this release also adds two new PowerShell features, including the Get‑SecureBootUEFI cmdlet now supports the -Decoded option to display Secure Boot keys and certificates in a readable format, and the Get‑SecureBootSVN cmdlet lets you check the Secure Boot Security Version Number (SVN) of your device’s UEFI firmware and bootloader and report whether it follows the latest Secure Boot policy.

Also, this version of the operating system won’t receive any new features, as this release has reached the end of support.

Windows 11 March 2026 Patch Tuesday – Manual installation process

Since there’s always a chance of problems during and after applying a quality update, it’s recommended to prepare your computer by creating a restore point and a full backup before proceeding with the installation.

To download and install this Windows 11 update, open the “Windows Update” settings and click the “Check for Updates” button.

The update will download and install automatically. However, you can also apply it manually by downloading the update KB5079473 from the Update Catalog website. You can use this download link to get the update (KB5078883) for version 23H2.

If your computer has issues after installing this package, follow these instructions to uninstall the March 2026 update. If you’re unable to uninstall the update, follow these steps to recover your device.

Windows 11 March 2026 Patch Tuesday – Update history

• Initial Release – Release Preview Channel:
  • Windows 11 25H2 build 26200.7918 release date: February 17, 2026. Official notes.
  • Windows 11 24H2 build 26100.7918 release date: February 17, 2026. (same).
  • Windows 11 25H2 build 26200.7921 release date: February 19, 2026. (Same).
  • Windows 11 24H2 build 26100.7921 release date: February 19, 2026. (same).
• Second Release – Optional Install (Stable Channel):
  • Windows 11 25H2 build 26200.7922 release date: February 24, 2026. Official notes.
  • Windows 11 24H2 build 26100.7922 release date: February 24, 2026. (same).
• Final Release – Patch Tuesday (Stable Channel):
  • Windows 11 25H2 build 26200.8037 release date: March 10, 2026. Official notes.
  • Windows 11 24H2 build 26100.8037 release date: March 10, 2026. (same).
  • Windows 11 23H2 build 22631.6783 release date: March 10, 2026. Official notes.

Update March 10, 2026: This content has been updated with new information, and it’s been revised to ensure accuracy.