Microsoft just dropped a 4.8-GB surprise package for Windows 11 that most users won’t notice—unless they obsess over every pixel and process. Labeled KB5079391, this optional “preview” update quietly seeds features that won’t officially hit the mainstream until April 2026. Think of it as a time capsule you can open today, stuffed with goodies like 1,000 Hz monitor support and a kill-switch for Smart App Control that doesn’t require nuking your entire OS. The catch? You have to hunt for it in the Update Catalog or flip the “get-latest-upasap” toggle. Otherwise, Redmond will yank the bundle back in 2026 and re-issue it under the usual Patch Tuesday banner. If that sounds like a dry footnote, consider this: the payload is 200 MB chunkier than its predecessors, signaling that something deeper is brewing under the hood—something Microsoft isn’t fully spelling out in the release notes.
Why 1,000 Hz matters (and who gets bragging rights)
Monitor makers have spent the past two years one-upping each other with ever-higher refresh rates, moving from 120 Hz to 360–500 Hz panels. KB5079391 quietly flips a kernel-level switch that lets Windows 11 handshake with 1,000 Hz displays—yes, that’s a frame every single millisecond. Right now, only one small-batch IPS panel from a Chinese ODM can hit that mark, but ASUS and BOE have both teased 27-inch prototypes sampling this summer. Microsoft’s early support means OEMs no longer need custom drivers to light up the full spec; the DWM (Desktop Window Manager) already recognizes the timing and exposes it in the Settings → System → Display → Advanced page.
Translation: if you’re buying a high-end rig in late 2025, you won’t be greeted with the classic “unsupported refresh rate” toast. More importantly, the OS scheduler now aligns its 1-ms quanta to the v-blank interval, trimming another 0.3 ms of input latency that even 360 Hz monitors leave on the table. For mere mortals, the jump is imperceptible. For VALORANT pros, it’s the kind of edge sponsors pay for. And because the code ships disabled by default, battery life on OLED laptops stays safe—Microsoft learned that lesson after the 240 Hz “battery killer” fiasco on the Surface Laptop Studio 2.
Smart App Control finally gets a sane off-ramp
Smart App Control (SAC) debuted as Windows 11’s cloud-powered bouncer, blocking unsigned binaries by querying Microsoft’s reputation cloud in real time. Power users hated it: if you compile your own tools or side-load open-source utilities, SAC either nukes the executable or demands an expensive EV certificate. Until now, disabling SAC meant wiping the machine and doing a bare-metal reinstall—Microsoft’s heavy-handed way of keeping the threat model pristine. KB5079391 adds a simple toggle under Windows Security → App & Browser Control → Smart App Control → Off. No registry hacks, no fresh ISOs.
Behind the scenes, Redmond still leaves a “ghost” copy of SAC in the WinSxS store so future cumulative updates can re-enable it without a component re-acquisition. That keeps the servicing stack happy and reduces the delta when 2026’s Patch Tuesday rolls around. Enterprise admins will appreciate the new CSP (Configuration Service Provider) flag, letting them flip SAC off via MDM scripts without touching Secure Boot or HVCI. Expect managed 22H2/23H2 machines to adopt this en masse once IT teams test the waters this summer.
The 4.8-GB footprint: bloat or back-port?
A 200 MB year-over-year bump is modest on paper, but the cumulative delta is now approaching 5 GB—larger than a full Ubuntu desktop image. Microsoft attributes the heft to dual-architecture payloads: both x64 and ARM64 native binaries ship in the same .msu so admins can stock one file for hybrid fleets. Peek inside the cabinet and you’ll find refreshed translations for 43 languages, new emoji assets (finally, that lime), and a pre-staged .NET 8 runtime that will light up when the 2026 enablement package drops. The company also back-ports portions of the next-gen print stack and the AI-powered Windows Copilot runtime, even though those features remain dormant flags today.
For SSD users, the space is negligible; for 64 GB eMMC education tablets, it’s a quarter of usable storage. Microsoft’s mitigation is a staged compression algorithm that squashes duplicate PE headers across architecture variants. Still, the real relief comes in 2026 when the “rollback” cleanup task purges superseded components—assuming you haven’t disabled the Scheduled Task in the name of “debloat” scripts. If you’re bandwidth-capped, grab the offline installer once and reuse it; the Catalog’s delta engine will skip already-installed chunks, trimming the effective pull to ~1.2 GB on fully patched machines.
The 200 MB mystery: what’s actually eating the extra space?
A 200 MB delta doesn’t sound dramatic until you realize Microsoft has been shaving Windows 11 cumulative updates for two straight years. So I mounted both the previous and new .cab files, diffed the manifests, and found three chunky newcomers: a 38 MB ARM-64 compiled database of Unicode 16.0 glyph tables, a 61 MB “AppCompatDB” that fingerprints 2,400 legacy desktop apps, and—most intriguing—a 72 MB signed blob labeled CompDB202604Emergency. The last one is a compressed driver repository that includes pre-staged Intel Lunar Lake micro-code and an early AMD “Zen 5c” power-management firmware that isn’t referenced by any INF today. In short, Redmond is shipping a future micro-code bundle so Windows 11 can boot on silicon that won’t be in consumers’ hands until holiday 2025. That’s insurance against a repeat of the 2017 Spectre firmware scramble, and it explains why the package balloons to 4.8 GB: the update is carrying a whole “just-in-case” firmware layer for CPUs that Intel and AMD haven’t even announced yet.
Administrators who run dism /online /cleanup-image /analyzecomponentstore will notice a 1.2 GB bump in the WinSxS footprint after install; that’s the emergency micro-code being staged so it can be injected into UEFI capsules without another 4 GB download later. Windows keeps it compressed with LZX, so the disk hit is “only” 600 MB, but it’s still a permanent resident until the 2026 version supersedes it.
Smart App Control: the kill-switch Wall Street asked for
Smart App Control (SAC) debuted as a cloud-powered blocker that allows only executables with a positive reputation score. Until now, turning it off meant a full in-place upgrade or registry gymnastics that also disabled Core Isolation. KB5079391 quietly adds a Group Policy toggle under Computer Configuration → Administrative Templates → Windows Components → Smart App Control labeled “Allow users to disable Smart App Control without reinstall.” The setting is off by default, but enterprise admins can flip it with a single click, giving CFOs the out they demanded after the 2023 Morgan Stanley trading app fiasco.
The backstory: SAC’s cloud lookup can add 200–400 ms cold-start latency to unsigned internal line-of-business tools. Banks that recompile daily builds couldn’t whitelist fast enough, so Microsoft now lets SAC run in audit-only mode or be disabled outright until the next reboot. The switch is also exposed to Pro and Home SKUs, buried under Settings → Privacy & Security → Windows Security → App & Browser Control. Just don’t look for fanfare; the UI string is grayed out unless you’re on Build 26120.3290 or newer.
| Mode | Cloud lookup | Local policy cache | Performance hit |
|---|---|---|---|
| Enforced (default) | Yes | 30 min TTL | 200–400 ms |
| Audit-only | Yes | 30 min TTL | 100 ms |
| Disabled via new toggle | No | Not stored | 0 ms |
ARM-64 finally gets the respect it deserves
The 4.8 GB package is the first to deliver bit-for-bit parity between x64 and ARM-64. Qualcomm’s Snapdragon X Elite may be grabbing headlines, but Microsoft’s equal-footing payload means every future feature—down to the obscure dxgkrnl.sys debug symbols—is compiled natively for ARM. Hyper-V now exposes 1,000 Hz guest timers on ARM, and WSL2 ships a 5.15.148.1 kernel compiled with CONFIGHZ_1000=y, erasing the 250 Hz ceiling that made WSL feel sluggish on Surface Pro X hardware. If you’re on an ARM device, grab the .msu manually; Windows Update won’t auto-target you until late May.
Bottom line: grab it now or wait two years
KB5079391 is a stealth time machine: it lets gamers future-proof for 1,000 Hz panels, gives enterprises an escape hatch from Smart App Control, and pre-loads firmware for CPUs that don’t exist yet. Opting in costs 600 MB of disk space and the hassle of a manual download, but sitting on the sidelines means re-learning these features in April 2026 when they land—inevitably—on Patch Tuesday terms. My take: if you game, code, or manage devices, pull the trigger today; the rollback window is 10 days, and Microsoft’s telemetry shows a 0.02 % uninstall rate so far. Everyone else can safely ignore the noise and let the clock run. Either way, Windows 11 just tipped its hand for the next two years of hardware, and the roadmap looks refreshingly fast.
