Windows 10: New Windows 11 Update (28020.1611) Adds Built-In Sysmon and OneDrive Sharing Tweaks

Microsoft is rolling out Windows 11 Insider Preview Build 28020.1611 (KB5077221) to the Canary Channel. As expected with Canary builds, this release focuses on early platform changes and experimental features. Windows 11 gets built-in Sysmon and sharing improvements in thew new KB28020.1611 build.

There’s also a small known issue: the desktop watermark currently shows the wrong build number, which Microsoft says will be corrected in an upcoming build.

While you can check the previous update, here are all the new improvements in Canary Build 28020.1611

Windows 11 Insider Preview Build 28020.1611 (Canary Channel)


One of the biggest additions in Windows 11 KB5077221 build is native Sysmon support.

Previously available as a separate Sysinternals download, Sysmon (System Monitor) is now integrated directly into Windows as an optional feature. IT professionals and security teams widely use Sysmon to monitor detailed system activity for threat detection.



What Sysmon Does?


Sysmon captures and logs system-level events, including:

• Process creation
• Network connections
• File changes
• Driver loading activity

These events are written to the Windows Event Log, where they can be analyzed by security tools or SIEM platforms.

How to Enable Built-In Sysmon?


Sysmon is disabled by default and must be manually enabled. You can activate it through:

Settings path:

Settings > System > Optional features > More Windows features > Enable Sysmon
​

Or via command line:

Dism /Online /Enable-Feature /FeatureName:Sysmon

Then complete installation with:

sysmon -i

Important: If you previously installed Sysmon manually from the Sysinternals website, you must uninstall it before enabling the built-in version.

Microsoft notes that Sysmon’s functionality remains unchanged — it is simply now part of Windows itself.

Improves OneDrive Sharing in Windows Share


Build 28020.1611 also enhances the Windows Share experience for OneDrive users.

When right-clicking a OneDrive cloud file and selecting Share, clicking Copy link now provides additional options under “Share using”, allowing the link to be sent directly through other apps.

This update is currently rolling out to:

• Windows Insiders signed in with a Microsoft account
• Users outside the European Economic Area (EEA)

The change aims to make sharing cloud content faster and more seamless within Windows.

28020.1611 General Fixes

• The desktop watermark has been corrected to display the proper build number (though some users may still see the incorrect one temporarily).

Reminders for Windows Insiders in the Canary Channel


As a reminder, Canary Channel builds:

• Represent early platform changes
• May be unstable
• May include features that never ship publicly
• Often roll out features gradually using Controlled Feature Rollout (CFR)

Switching off the Canary Channel requires a clean installation of Windows 11, as users cannot move to lower build channels without reinstalling.

Microsoft also notes that some features may appear in Dev or Beta channels before arriving in Canary.

What KB5077221 Build Signals?


The KB5077221 integration of Sysmon into Windows marks a notable shift. Bringing a security monitoring tool directly into the OS lowers friction for enterprises and users who care about security.

While Canary builds aren’t meant for everyday systems, Build 28020.1611 gives an understanding of how Microsoft continues to strengthen Windows 11’s security and cloud integration.

More documentation on built-in Sysmon will be posted soon.

Thank you for being a Ghacks reader. The post New Windows 11 Update (28020.1611) Adds Built-In Sysmon and OneDrive Sharing Tweaks appeared first on gHacks.

read more...

 

New P5Q-PRO BIOS IS OUT NOW 1611

Direct link:

http://dlsvr.asus.com/pub/ASUS/mb/socket775/P5Q_PRO/P5Q-ASUS-PRO-1611.zip

Each time you get an update, or simply need an older version that's not listed on the support site anymore, simply replace "1611" in the above link, with the version you're looking for.

 

Windows 10 - OneDrive

Right click on the app and one of the properties has an option to not automatically start it. Uncheck, restart the computer, and it should stop. If you want to go another step further, find the OneDrive app in the start menu, right click on it and uninstall.

If that is still insufficient, there is a batch uninstaller for OneDrive available online. I can copy the code here if you need it.

 

Windows 10 - OneDrive

[/quote] Click to expand... Sorry, but I think you're confused and keep referring to Onedrive. There is a big difference between the consumer version of Onedrive business O365 version. I do not have the consumer version of Onedrive installed... it is Onedrive for Business. Also, this script is for "Onedrive" .... not Onedrive for Business. Thanks anyway.

OneDrive (for Business) built-in Windows 10 differences?

No thanks for providing a non-rant version. I ought to recruit about 20 million people and walk down to Microsoft headquarters and do them in. Tired of Microsoft forcing their childish development skills on the masses.