Windows 11 Insider Preview adds granular per-app privacy controls for camera, microphone, and location

8 min read

Help Desk Geek is reader-supported. We may earn a commission when you buy through links on our site. Learn more.

Microsoft’s October 23, 2026 release notes for Windows 11 Insider Experimental (26H1) Preview Build 28120.3302 confirm a new feature Neowin has tracked since August: separate camera, microphone, and location permissions for each traditional desktop (Win32) app. If you’re on a regular Windows 11 PC, you don’t have it yet. It’s limited to Insider builds, it’s reaching testers gradually, and Microsoft hasn’t confirmed a date for everyone else.

What Happened

Microsoft’s release notes for build 28120.3302, which Neowin reports on as well, describe per-app permission controls for desktop programs on three pages:

  • Settings > Privacy & security > Camera
  • Settings > Privacy & security > Microphone
  • Settings > Privacy & security > Location

On builds that have the feature, each desktop app shows up in the list with its own allow/deny control. That’s how Microsoft Store apps already work.

Here’s what Microsoft’s release notes say changes:

  • Desktop apps get their own toggles. Microsoft says access for traditional desktop apps was previously managed through a single device-wide setting per resource, rather than app by app.
  • First-time prompts. Apps that haven’t accessed a resource yet prompt for permission the first time they request it.
  • Your existing choices carry over. Microsoft says apps you’ve already allowed keep access, apps you’ve denied stay denied, and no settings are reset.
  • Enterprise policies keep working. Microsoft says existing enterprise policies continue to function as designed and that it is exploring additional management capabilities. IT teams should still test on their own builds.
  • Some apps look unfamiliar. Microsoft notes that apps relying on shared system components or browser-hosted experiences might appear under an unexpected name, and apps whose publisher Windows can’t verify might appear as ā€œUnsigned.ā€

Which builds have it

The reported build numbers don’t line up neatly, so don’t treat any single one as definitive. One build is independently confirmed by Microsoft’s own release notes; the others come only from Neowin’s reporting and couldn’t be independently verified against Microsoft documentation.

Reported buildReported dateIndependently verified?
28120.3302 (Insider Experimental 26H1 channel)October 23, 2026Yes, per Microsoft’s release notes
Additional builds in the 26340 and 28120 seriesReported by Neowin between August 21 and October 26, 2026Not independently confirmed

Neowin’s earlier report described the feature as something Windows 11 ā€œcould be getting.ā€ The later coverage shows it appearing in Insider builds. Microsoft is using a Controlled Feature Rollout, which means installing build 28120.3302 doesn’t guarantee you’ll see the new toggles right away.

Neowin’s reporting doesn’t mention a manual switch to force the rollout, but that absence in the coverage we reviewed doesn’t confirm one couldn’t exist.

One sourcing note: the feature details above come from Microsoft’s official release notes for build 28120.3302. The additional build numbers come only from Neowin’s reporting.

Who this affects

  • Windows Insiders. Only PCs enrolled in the Windows Insider Program and running a qualifying preview build can get this. Even then, it may not show up right away.
  • Everyone on stable Windows 11. Nothing changes for you yet. Your camera, microphone, and location pages keep working as they do today.
  • Office and family tech helpers. This is the group that gains most once it ships. You’ll be able to audit a shared PC app by app instead of guessing which blanket switch affects which program.
  • Managed business PCs. Microsoft says existing enterprise policies continue to function as designed, so IT-managed rules shouldn’t break. Admins should still confirm behavior in a test ring.

If you’re thinking about joining the Insider Program, check Microsoft’s own Insider Program page for current enrollment requirements.

How It Stacks Up

Microsoft is extending an existing idea here, closing a gap between two kinds of apps. Here’s how it compares with the controls Windows already has:

ControlWhat it doesGranularity for desktop appsWho has itSource
Broad desktop-app switch (stable Windows 11)One switch per resource covers all Win32 appsNone. All desktop apps share one settingEveryone on Windows 11 todayNeowin
Microsoft Store app permissionsSeparate allow/deny for each Store appDoesn’t apply to Win32 appsEveryone on Windows 11 todayNeowin
App permission activity history (Build 25145, June 22, 2022)Shows a 7-day history of which apps used camera, mic, or locationVisibility only. No per-app allow/denyIntroduced to Insiders in 2022Microsoft
New per-app Win32 controls (Insider, 2026)Separate allow/deny for each desktop appPer-app allow/deny for camera, microphone, and locationSome Insiders, gradual rolloutMicrosoft release notes

The 2022 comparison helps. Build 25145 let you see which apps had recently used your camera, microphone, or location. It couldn’t stop one desktop app while allowing another. You could see that a utility you rarely use had grabbed the microphone, but your only real option was the blanket switch. That would also cut off Teams, Zoom, or whatever else you rely on.

The new controls are the missing second half. Visibility arrived in 2022. Control over individual desktop apps is only now being tested.

Windows 11 Settings > Privacy & security > Microphone page on an Insider Preview build, showing the per-app list with individual allow/deny controls

What ā€œUnsignedā€ and strange app names mean

These two labels will confuse people first, so here’s the short version based on Microsoft’s release notes:

  • ā€œUnsigned,ā€ according to Microsoft, means Windows couldn’t verify the app’s publisher information. That doesn’t automatically make it malware. Plenty of small utilities and older tools aren’t signed. Treat it as a reason to check where the program came from before you give it your camera or microphone.
  • An unfamiliar name, Microsoft says, can show up when an app relies on shared system components or browser-hosted experiences, so Windows lists it differently than the name you know. Before you block it, compare it against your installed programs. If you deny something you don’t recognize and it turns out to be the engine behind your video-call app, that app may lose access.

The Reaction

Public reaction is still forming, and the best evidence so far is Microsoft’s release notes rather than crowd sentiment. Insiders are discussing preview builds in threads like this r/windowsinsiders post, but there isn’t enough attributable reaction yet to call it a consensus either way.

Our Take

Verdict: Wait for it on stable Windows. Don’t join the Insider Program just for this. There’s nothing to worry about, and some good news is coming.

This is a sensible, overdue fix. Store apps have had per-app toggles for years, while desktop programs, which are most of what people actually install, shared one switch. The carry-over rules are the reassuring part. Microsoft says your current allow/deny choices stay put, no settings are reset, and company policies keep working, so the change itself shouldn’t cut off an app that already had access.

The risks are small and mostly about confusion:

  • Insider builds are experimental. Running preview Windows on your main work PC to get one privacy toggle is a bad trade. Preview builds can bring unrelated bugs.
  • Over-blocking. The ā€œUnsignedā€ label and odd app names could tempt you to deny entries you don’t recognize, which might quietly break a conferencing app. Check before you click.
  • Timing is unknown. Microsoft hasn’t confirmed when this reaches stable Windows 11. Treat any specific date you see elsewhere with suspicion unless it comes from Microsoft.

What to do next

Pick the one that fits you:

  • On stable Windows 11 (most people): Keep using the existing controls under Settings > Privacy & security > Camera, Microphone, and Location. If a desktop app shouldn’t have access and you can live without the others, the broad switch still works. For the camera specifically, a cheap webcam privacy shutter or a USB webcam you can unplug gives you physical control over the camera itself. A shutter only covers the lens, though. A headset with a hardware mute switch helps for headset audio, but it doesn’t affect a laptop’s built-in microphone.
  • Already an Insider: Check your build number under Settings > System > About against the builds listed above. If you don’t see per-app toggles yet, wait. The rollout is gradual, and we didn’t find a documented way to force it, though that doesn’t rule one out.
  • Curious and comfortable with risk: You can enroll a spare or test PC through Settings > Windows Update > Windows Insider Program. We wouldn’t do it on a PC you need for work, and joining still doesn’t guarantee you’ll get this feature.

Wrapping Up

In our view, Windows 11 is catching up on something overdue: letting you decide which desktop apps can use your camera, microphone, and location, one by one. For now it’s Insider-only, it’s arriving gradually, and there’s no confirmed release date.

For most people, the right move is to keep using the existing switches and let this land on its own. If an app keeps grabbing your camera or mic when you’ve told Windows not to, don’t blame the new feature. Run a malware scan and check what’s installed.

Your situationActionApplies to
Stable Windows 11Use the existing Camera/Microphone/Location pages; consider a webcam shutterMost users
Windows InsiderCheck build in Settings > System > About, then wait for rolloutEnrolled PCs
Want to try it earlyEnroll a spare PC onlyTest machines

Sources