For enterprise systems administrators, the standout addition in Build 26340.9750 is the expansion of Web sign-in to Microsoft Entra hybrid-joined devices. For everyday users and enthusiasts, the build introduces a low-light screen brightness boost for Windows Hello facial recognition, a reworked Gaming Task View navigation bar in Xbox mode, and targeted fixes for File Explorer, Windows Search, and the modernized Run dialog. Because Microsoft is distributing these updates via Controlled Feature Rollout (CFR), features will appear gradually across a subset of Insider systems before expanding more broadly.
Enterprise Identity: Web Sign-In Expands to Entra Hybrid-Joined PCs
If you have spent the last few years managing an enterprise environment with one foot in on-premises Active Directory and the other in Microsoft Entra ID, you know that "cloud-first" features often treat hybrid topologies as an afterthought. Until now, Windows Web sign-in was strictly reserved for pure cloud-native Microsoft Entra-joined machines.
In Build 26340.9750, Microsoft is extending Web sign-in support to Microsoft Entra hybrid-joined devices. Once active at the Windows lock screen, the updated credential provider allows users on hybrid machines to authenticate without a password using one of three supported methods:
- A FIDO2 security key
- A passkey stored on a phone
- A Temporary Access Pass (TAP)
Crucially for hybrid environments, Microsoft notes that once the user completes the passwordless sign-in, Windows automatically acquires a Kerberos ticket. That ticket ensures that legacy on-premises file shares and internal intranet sites continue working seamlessly without prompting the user for traditional domain credentials.
How This Compares to Existing Production Guidance
To appreciate why this preview change matters—and why IT teams need to approach it with careful testing—it helps to compare the Build 26340.9750 release notes against Microsoft's current general production documentation for Web sign-in and Temporary Access Pass on Microsoft Learn:
| Capability / Requirement | Existing Production Documentation | Build 26340.9750 (Experimental Preview) |
|---|---|---|
| Supported Join State for Web Sign-In | Microsoft Entra-joined only (Windows 11 22H2 with KB5030310 or later); hybrid-joined and domain-joined explicitly listed as unsupported | Adds support for Microsoft Entra hybrid-joined devices |
| Supported Hybrid Lock-Screen Credentials | Standard hybrid sign-in methods; TAP on hybrid devices requires authenticating with another method first before setting up Windows Hello for Business | FIDO2 security key, phone passkey, or TAP directly via Web sign-in at the lock screen |
| On-Premises Resource Access | Separate FIDO2 on-premises configuration required for security keys | Windows obtains a Kerberos ticket after sign-in so on-premises file shares and internal sites keep working |
While this preview opens a promising path for passwordless onboarding and recovery on hybrid endpoints, administrators should keep existing Web sign-in architecture and limitations in mind. As documented in Microsoft's general Web sign-in guidance, the feature operates as a cloud-dependent credential provider using a system-managed local account (WsiAccount) and requires active internet connectivity. Cached credentials are not supported for Web sign-in, meaning an offline laptop cannot use the Web sign-in provider to log in (and users stuck on the offline prompt must press Ctrl + Alt + Delete to return to the lock screen).
Furthermore, Microsoft's release notes for Build 26340.9750 do not yet outline whether additional tenant policies, Intune Settings Catalog entries beyond the existing EnableWebSignIn policy, or specific domain controller prerequisites are required for the new hybrid implementation. IT pros should treat this strictly as an Experimental channel preview rather than a production-ready deployment feature.
Section Summary: Build 26340.9750 previews Web sign-in on Microsoft Entra hybrid-joined PCs using FIDO2 keys, phone passkeys, or TAP, complete with automatic Kerberos ticket retrieval for on-premises shares.
Quality-of-Life Additions: Windows Hello and Gaming Task View
Beyond enterprise identity plumbing, Build 26340.9750 addresses two practical hardware-adjacent scenarios: signing into your PC in a dark room and navigating system controls while gaming.
Screen Brightening for Windows Hello Facial Recognition
While infrared (IR) emitters handle the heavy lifting for Windows Hello face authentication, ambient lighting conditions can still trip up recognition in pitch-black or dimly lit rooms. Microsoft is introducing an optional feature that temporarily brightens your display during sign-in to illuminate your face.
If the feature has rolled out to your Insider device, you can enable it by following these steps:
- Open the Settings app.
- Navigate to Accounts > Sign-in options.
- Select Facial recognition (Windows Hello) to expand the section.
- Toggle on Automatically adjust screen brightness during face recognition.
Microsoft's release notes do not list specific display panel or webcam hardware requirements beyond having Windows Hello facial recognition configured.
Refreshed Gaming Task View in Xbox Mode
For Insiders testing Windows 11 on handhelds, living-room setups, or controller-driven sessions using Xbox mode, Microsoft has updated the Gaming Task View interface. The refreshed layout adds a dedicated navigation bar that puts Exit to Desktop and Power Options within immediate reach. Previously, backing out of a full-screen gaming session or putting a device to sleep could require extra menu digging; elevating these two actions directly into the Task View navigation bar streamlines controller and touch navigation.
Section Summary: Windows Hello gains an optional setting to temporarily brighten the screen during low-light face sign-ins, and Xbox mode's Gaming Task View adds a navigation bar for quicker access to desktop exit and power controls.
Shell Refinements: File Explorer, Windows Search, and the New Run Dialog
A major focus of the 26340 Experimental series has been polishing core Windows 11 shell components—and occasionally fixing regressions introduced by earlier preview flights.
Fixing the Windows Search Regression
In the immediately preceding Experimental flight, Build 26340.9616 (published October 13, 2026), Microsoft rolled out backend changes aimed at helping Windows Search better understand typos and synonyms. As sometimes happens in experimental development branches, tuning the search engine appears to have rattled the front door: some Insiders found that Windows Search appeared missing or stopped functioning altogether after updating, particularly if they rapidly clicked the search icon multiple times. Build 26340.9750 resolves those underlying issues so Search remains responsive even under impatient clicking.
File Explorer and Modern Run Dialog Fixes
Microsoft has also targeted several everyday friction points across the desktop shell:
- File Explorer Responsiveness: Folder views have been tuned to respond faster and sort items accurately right when files or folders are added or renamed, addressing a longstanding annoyance where views sometimes lagged behind file system changes.
- New Run Dialog Improvements: For Insiders who have the modernized Run dialog enabled via Controlled Feature Rollout, Build 26340.9750 fixes a bug where typed characters could vanish if you began typing immediately after invoking the dialog. It also boosts performance when browsing through very large directories, corrects the window's screen positioning for Arabic and Hebrew right-to-left (RTL) display languages, and applies minor visual polish.
- Shutdown and System Dialogs: Under the hood, Microsoft reduced the likelihood of the OS hanging during shutdown in certain scenarios and fixed a regression so system prompts—such as low-battery warnings and permission dialogs—consistently render with their modern Windows 11 visual design.
Section Summary: Build 26340.9750 repairs a Windows Search failure from the prior flight, improves File Explorer sorting responsiveness when adding or renaming items, and fixes fast-typing text loss, large-folder lag, and RTL layout positioning in the modernized Run dialog.
What Insiders and IT Pros Should Keep in Mind
As with all flights in the Experimental channel, Build 26340.9750 carries Microsoft's standard pre-release caveats. Features in this branch are not tied to a guaranteed retail release timeline; they may be modified, replaced, or pulled entirely based on telemetry and Feedback Hub reports, and localization for certain interface strings may still be incomplete. Additionally, because Controlled Feature Rollout governs most of these additions, installing Build 26340.9750 does not guarantee that hybrid Web sign-in, the Windows Hello brightness toggle, or the updated Gaming Task View will appear on your machine on day one.
Still, for identity architects waiting to eliminate the last pockets of password dependency on hybrid-joined endpoints—and for power users who just want the Run box to keep up with fast typing and File Explorer to sort newly renamed files without a manual refresh—Build 26340.9750 is a welcome step forward in the 26H2 testing cycle.