Enhanced Security and Performance Updates for Command Prompt in Windows 11

Microsoft is bolstering the security and performance of Command Prompt (CMD) and batch file execution in Windows 11 through recent Insider Preview builds. These updates, aimed primarily at enterprise environments, introduce controls to prevent modification of batch files during runtime and improve audio sharing capabilities.

Securing Batch File Execution

IT administrators now have the ability to enable a more secure processing mode for batch files. This mode prevents batch files from being altered while they are running. This is achieved by adding the LockBatchFilesInUse registry value under HKEY_LOCAL_MACHINESoftwareMicrosoftCommand Processor. Alternatively, policy authors can utilize the LockBatchFilesWhenInUse application manifest control to enable this feature.

According to the Windows Insider team, this enhancement improves performance and security, particularly when code integrity is enabled. Signature validation is required only once, rather than for each statement executed within the batch file, streamlining the process and reducing overhead.

Improved Shared Audio Experience

Microsoft has as well refined the Shared Audio feature, initially introduced in October 2025, allowing users to share audio between multiple headphones, speakers, earbuds, or hearing aids. Previous iterations applied volume adjustments equally to all listeners. The latest update introduces individual volume sliders for each listener and connected device, providing more granular control.

A recent taskbar indicator now appears during active sharing sessions, offering a visual cue and quick access to sharing settings. The compatibility list for Shared Audio has expanded to include the Samsung Galaxy Buds 4 and Buds 4 Pro, Sony WF-1000XM6, and Xbox Wireless Headset, alongside other Bluetooth LE Audio accessories.

Availability

These new features are currently available to Windows Insiders in the Beta and Dev channels who have installed Windows 11 Preview Build 26220.7934 (KB5077242) and Windows 11 Preview Build 26300.7939 (KB5077243), respectively.

Key Takeaways

• Enhanced security for batch file execution through the LockBatchFilesInUse registry value and LockBatchFilesWhenInUse application manifest control.
• Improved performance of batch file processing with reduced signature validation requirements.
• Individual volume control for each listener in the Shared Audio feature.
• Expanded compatibility for Shared Audio with new Bluetooth LE Audio accessories.