Skip to the content
The Update Bureau
Windows 11 Windows 11 Insider 26H1 Insider Preview, Experimental Channel
Windows Insider

Build 28120.3542

Build 28120.3542: Windows Insider Experimental Channel, November 2026. Run dialog refresh and BitLocker PIN setup for standard users

In short

A refreshed Run dialog and BitLocker preboot PIN setup for standard users are rolling out to Experimental Channel Insiders; the PIN feature is for managed devices.

Does it affect you? Applies to: Devices enrolled in the Experimental Channel. The BitLocker PIN feature applies to standard users on managed devices.

Build
28120.3542

This is a test build for people in the Windows Insider Program. Features in it can change, be removed, or never reach regular Windows releases.

What changes

New features 2 changes

Run dialog

Gradual rollout

For: Insiders in the Experimental Channel

  • The Run dialog gets a cleaner look and new controls. You can turn on the refreshed version in Settings.1

BitLocker

Gradual rollout
  • Standard users on managed devices can set a PIN before Windows starts.2
    The feature lets standard users add a TPM+PIN protector. In Microsoft Intune or another device management solution, set AllowStandardUserEncryption to ON, AllowWarningForOtherDiskEncryption to OFF, RequireDeviceEncryption to ON, and SystemDrivesRequireStartupAuthentication to ON. Target these policies only to a standard-user test group with this feature enabled; otherwise, device encryption can fail or devices encrypted with TPM only can report as non-compliant.

Improvement 1 change

General

Gradual rollout

For: Insiders running this build

  • This build includes a small set of general changes intended to improve the experience for Insiders.3

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-11-13
Type
Windows Insider build
VersionBuildChannel
— 28120.3542 Experimental Channel

Security

No vulnerabilities are listed for this update.

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. A refreshed Run dialog experience is rolling out with a more modern look and improved usability. learn.microsoft.com
  2. 2. Standard users can now set a BitLocker preboot PIN. Before this change, users without admin rights couldn't add the TPM+PIN protector. Now, standard users on managed devices can add the PIN themselves. learn.microsoft.com
  3. 3. This update includes a small set of general improvements and fixes that improve the overall experience for Insiders running this build on their PCs. learn.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake