Windows Server 26100.2894 → 26100.32234
20 releases · 0 breaking changes · 29 security fixes · 0 advisories fixed
29security0breaking2deprecated42feature149fix
Breaking changes
None in the release notes.
Security changes
- security [Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App. in 26100.32234
- security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 26100.32230
- security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 26100.32230
- security [PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content. in 26100.7462
- security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 26100.7171
- security [Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings. in 26100.7171
- security [Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 26100.7171
- security [Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are… in 26100.7171
- security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 26100.6905
- security [USB] Fixed: After installing the Windows security update released on October 14, 2025 (KB5066835), USB devices, such as keyboards and mice, do not function in the Windows Recovery Environment (WinRE). This issue prevents navigation of any of the recovery options within WinRE. Note that the USB… in 26100.6901
- security New! After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to unblock files,… in 26100.6899
- security [Cryptography] This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change,… in 26100.6899
- security [Print] To meet security goals and support new print capabilities, this update transitions Windows printing components from MSVCRT to a modern Universal C Runtime Library. As a result of this change, print clients running versions of Windows prior to Windows 10, version 2004 and Windows Server,… in 26100.6584
- security [App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,… in 26100.6584
- security [File server] This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already… in 26100.6584
- security [Fix for Azure Virtual Machines with Trusted Launch disabled] This update addresses an issue that prevented some virtual machines (VMs) from starting when Virtualization-Based Security (VBS) was enabled. It affected VMs using version 8.0 (a non-default version) where VBS was offered by the host.… in 26100.4656
- security Security update: includes the July 2025 Security Updates in 26100.4652
- security [Wi-Fi] Fixed: The Windows Security dialog might stop responding when you sign into certain Wi-Fi networks. This issue might also occur in some other options in Settings. in 26100.4061
- security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 26100.4061
- security [Microsoft RPC Netlogon protocol] This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain… in 26100.4061
- security Security update: includes the April 2025 Security Updates in 26100.3775
- security [Performance] Fixed: After installing the Windows security update (KB5051987), released February 11, 2025, and later updates, on Windows Server 2025 devices, the SQL Server Launchpad service might not start if SQL Server Machine Learning Services is installed. in 26100.3775
- security [OS Security] After installing this update or a later Windows update, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted regardless of whether Internet Information Services (IIS) is enabled on the target device. This behavior is part of changes… in 26100.3775
- security [Kerberos Authentication] Change of behavior: Adds protections for a vulnerability which occurs when a certificate authority is part of the Windows root store but not the NTAuth store. This change enabled by default might cause Event ID: 45 events to be logged on the domain controller. For more… in 26100.3775
- security [Windows Hello] After installing this update or a later Windows update, for enhanced security, Windows Hello facial recognition requires color cameras to see a visible face when signing in. For more information, see CVE-2025-26644. in 26100.3775
- security Security update: includes the March 2025 Security Updates in 26100.3476
- security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds more drivers to the list that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 26100.3476
- security Security update: includes the February 2025 Security Updates in 26100.3194
- security [USB cameras] Fixed: Your device does not recognize the camera is on. This issue occurs after you install the January 2025 security update. in 26100.3194
Deprecations
- deprecated [PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain… in 26100.7462
- deprecated [PowerShell 2.0] Starting in September 2025, Windows Server 2025, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain… in 26100.6584
Every release in between
security[Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App.
other[Compatibility] This update removes the following modem drivers: agrsm64.sys (x64), agrsm.sys (x86), smserl64.sys (x64) and smserial.sys (x86). Modem hardware dependent on these specific drivers will no longer work in Windows.
security[Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote…
fix[Networking (known issue)] Fixed: This update addresses an issue where you might experience RemoteApp connection failures in Azure Virtual Desktop (AVD) environments. This might occur after installing KB5072033.
fix[Servicing (known issue] This update addresses an issue where devices that installed the out-of-band update (KB5070881) stopped receiving Hotpatch updates. Affected machines will resume Hotpatch updates after installing the January 2026 baseline update.
feature[Secure Boot] Starting with this update, Windows quality updates include a subset of high confidence device targeting data that identifies devices eligible to automatically receive new Secure Boot certificates. Devices will receive the new certificates only after demonstrating sufficient…
feature[Windows Deployment Services (WDS] This update introduces a change in behavior in which WDS will stop supporting hands-free deployment functionality by default. Detailed guidance for IT administrators is available in Windows Deployment Services (WDS) Hands‑Free Deployment Hardening Guidance.
security[WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a…
feature[File Explorer] New! Dividers now separate top-level icons in the File Explorer context menu.
feature[General] New! When an app requests access to location, camera, microphone, or other device capabilities, Windows shows a redesigned system dialog box. To emphasize the privacy prompt, the screen dims slightly, and the prompt appears at the center of the screen.
feature[Search on the Taskbar] New! When you use Search from the Windows taskbar, a new grid view will help you more quickly and accurately identify the desired image within your search.
feature[Settings] New! Windows activation and expiration prompts match the Windows 11 design and appear as system notifications when action is required. There also have been improvements to messaging under Settings > System > Activation.
featureNew! The larger clock with seconds is now back in the notification center, displayed above the date and calendar. To turn this option on, go to Settings > Time & language > Date & time, and turn on Show time in the Notification Center.
fixFixed: If you accidentally click and drag your mouse across the taskbar preview thumbnail, the preview might stop working.
feature[Task Manager] New! Task Manager now uses standard metrics to show CPU workload consistently across all pages, aligning with industry standards and third-party tools. If you prefer the previous view, you can enable a new optional column called CPU Utility in the Details tab to display the earlier…
deprecated[PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain…
other[Audio] Improved: Addressed an underlying audio service stops responding which could impact the ability to play audio in certain cases.
fix[Active Directory (known issue)]) Fixed: This update addresses an issue that occurs when you use ntdsutil.exe with 8KB database pages during an in-place upgrade to Windows Server 2025. The issue could damage the NTDS.dit database and prevent the Domain Controller from mounting it.
fix[Cryptographic Provider (known issue)] Fixed: Fixed: This update addresses an issue where you might see an error in Windows Event Viewer with Error ID 57. The event displays the following message: The 'Microsoft Pluton Cryptographic Provider' provider was not loaded because initialization failed.
fix[dbgcore.dll] Fixed: An underlying issue with dbgcore.dll could result in certain apps, including explorer.exe, crashing.
fix[Device management] Fixed: This update addresses an issue that prevented some system recovery features from working properly due to a temporary file sharing conflict. This affected certain device management tools and disrupted key functions on some devices.
fix[File system] Fixed: An issue in Resilient File System (ReFS) where using backup apps with large files could sometimes exhaust system memory.
fixFixed: Attempting to type Chinese with an IME after copying something with CTRL + C can result in the first character not displaying.
fixFixed: An underlying issue related to textinputframework.dll could result in certain apps like Sticky Notes and Notepad crashing.
fixFixed: This update addresses an issue with the Chinese (Simplified) Input Method Editor (IME) where some extended characters appear as empty boxes.
fix[Fixed This update addresses an issue that prevents typing on the touch keyboard when using the Microsoft Changjie, Microsoft Bopomofo, or Microsoft Japanese Input Method Editors (IMEs). The issue occurs after switching to a previous version of the IME.
fix[Kerberos] Fixed: There might be an underlying crash in Kerberos when attempting to access a cloud file share.
fix[Live captions] Fixed: Changing the opacity of live captions in Settings > Accessibility > Captions > Caption Style, has no effect.
other[Login] Improved: Addressed some underlying cases which could lead to you seeing a blank white screen, or a screen saying, "just a moment", for a few minutes when logging into your PC.
security[PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content.
other[System Components] The AppX Deployment Service (Appxsvc) has moved to Automatic startup type to improve reliability in some isolated scenarios.
fix[Upgrade to Windows Server 2025] Fixed: On some Intel C2030 systems with Samsung Non-Volatile Memory Express (NVMe) devices running Windows Server 2022, the upgrade to Windows Server 2025 might fail. Affected systems might fail to boot with error code 0x7B indicating INACCESSIBLE_BOOT_DEVICE…
feature[Start menu] New! We are adding a Boolean option to the Configure Start Pins policy to allow admins to apply Start menu pins once. This means that a user will receive admin pins on day 0 but can then make any changes to their Start pinned layout and have those changes safeguarded.
feature[Post-Quantum Cryptography] New! Building on post-quantum cryptography (PQC) algorithms in SymCrypt, this update adds API support for NIST post-quantum cryptography algorithms ML-KEM and ML-DSA in accordance with FIPS 203 and FIPS 204 standards. These algorithms can be used for key exchange,…
fixFixed: This update addresses an issue in Active Directory where duplicate entries could be added to a multi-valued attribute that requires unique values. Schema modifications to these attributes could result in replication failures due to a schema mismatch.
fixFixed: This update addresses an issue that could cause incomplete synchronization of large Active Directory groups (over 10,000 members) when using the directory synchronization (DirSync) control for on-premises Active Directory Domain Services (AD DS). This problem occurred after installing…
security[App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows…
security[Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings.
fix[Desktop icons] Fixed: If you have an app pinned to your desktop and it updates, the app icon might not display correctly and instead show a white page.
fixFixed: If you open More options in File Explorer to view the full list of folders for the current path, the dropdown menu might not display completely, making the bottom part inaccessible.
fixFixed: File operation progress dialogs might stop appearing when displayed from apps.
fixFixed: Syncing more SharePoint sites to File Explorer might slow performance when navigating folders or opening the context menu. This can also affect how quickly files launch.
fixFixed: File Explorer Home might unexpectedly only display a single folder (for example, Desktop), rather than the expected content with recent files and more.
other[Graphics] An issue where external graphics cards connected through Thunderbolt weren’t always recognized in some cases.
fix[Notifications] Fixed: When you select a Windows notification, it might not bring the related app to the foreground as expected—for example, this can happen with Outlook notifications.
fix[Settings] Fixed: Settings might stop responding when you try to save Wi-Fi network credentials.
security[Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios.
security[Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are…
fix[Networking] Fixed: This update fixes an issue in the HTTP.sys request parser, a Windows component that reads and processes HTTP requests. The parser allowed a single line break within HTTP/1.1 chunk extensions, where the RFC 9112 standard requires a carriage return and line feed (CRLF) sequence…
security[Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287.
security[USB] Fixed: After installing the Windows security update released on October 14, 2025 (KB5066835), USB devices, such as keyboards and mice, do not function in the Windows Recovery Environment (WinRE). This issue prevents navigation of any of the recovery options within WinRE. Note that the USB…
featureNew! We are rolling out some small changes in the European Economic Area (EEA) region for default browsers through the Set default button in Settings > Apps > Default apps:
featureAdditional file and link types will be set for the new default browser, if it registers them.
featureThe new default browser will be pinned to the Taskbar and Start menu unless you choose not to pin it by clearing the checkboxes.
otherThere is now a separate one-click button for browsers to change your .pdf default, if the browser registers for the .pdf file type.
featureNew! The Screen Curtain feature in Narrator helps protect your privacy and improve focus by blacking out the screen while Narrator reads content aloud. This is especially helpful in public or shared spaces, where you can work with sensitive information without others seeing your screen. To turn on…
featureNew! Narrator makes it easier to discover and learn about its features directly within the experience. Whether you're new or exploring advanced options, Narrator will guide you through the latest updates using a series of steps and prompts that explain each new feature and change.
featureNew! The country or region selected during device setup now appears under Settings > Time & language > Language & region.
fixFixed: The storage card in Settings > System > About shows an incorrect or unreadable character instead of the proper disk size.
featureNew! In addition to the new grouping of the Accessibility menu in Quick settings, there are text descriptions for the assistive technologies like Narrator, Voice access, and more for easier identification and learning.
featureNew! Adjusted the indicator (pill) under taskbar apps to make it wider and more visible.
fixFixed: WIN + CTRL + Number doesn't work anymore for switching windows of an open app in the taskbar.
featureNew! When you share links or web content using the Windows share window, you'll see a visual preview for that content.
featureNew! In the Windows share window, you can select a compression level—High, Medium, or Low Quality—when editing and sharing images, instead of selecting from a 0–100 scale.
other[Color] Improved: Adjusted the location of the intensity and color boost sliders under Settings > Accessibility > Color Filters, so the color previews at the top of the page remain visible while adjusting the sliders.
otherImproved: Performance has been enhanced when extracting archive files - this will particularly help in the case of copy pasting large numbers of files out of large 7z or .rar archives.
securityNew! After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to unblock files,…
otherImproved: Made underlying changes to enhance display related user experiences, including reducing screen flashing during certain display configuration transitions and eliminating unnecessary display resets that occurred in some cases.
fixFixed: Some displays might be unexpectedly green.
fixFixed: If User Account Control (UAC) is set to Always Notify and the button under Settings > System > Display color calibration is selected for your display and canceled, Settings will stop responding.
fix[Input] Fixed: Typing in Japanese with the touch keyboard might stop working after switching to typing with an English keyboard and then switching back.
fix[Language] Fixed: After you install Windows Server 2025, you might see garbled or unreadable text in some feature names and descriptions in the Add Roles and Features wizard in Server Manager. This issue affects the Windows Admin Center Setup and Network ATC (Automatic Traffic Control) features in…
fix[MSFTEdit.dll] Fixed: Some apps like Sticky Notes and dxdiag might stop responding when the display language is set to Arabic or Hebrew display.
fix[Networking (known issue)] Fixed: This update addresses an issue where you might not be able to connect to shared files and folders if you're using the Server Message Block (SMB) v1 protocol on NetBIOS over TCP/IP NetBIOS (NetBT). This can happen after installing update KB5065426.
fix[Quick Settings] Fixed: The top three buttons in the top row don’t respond when selecting to enable or disable them.
fix[Performance] Fixed: This update addresses an issue to maintain efficiency of Storage Spaces Direct (S2D). When running complex software defined data center (SDDC) related workflows, it’s possible the system might become unresponsive.
fix[Printing] Fixed: Printed lines might be unexpectedly thicker than expected.
fix[Scripting] Fixed: Running a script on a remote Server Message Block (SMB) share might take an unexpectedly long time if the share is hosted on an older Windows Server version like Windows Server 2019.
fix[Storage optimization] Fixed: An issue that prevented unused language packs and Feature on Demand packages from being fully removed, which led to unnecessary storage use and longer Windows Update installation times.
fixThis update addresses an issue that could cause Windows Search to successfully load very slowly, taking over 10 seconds to load before you can use it.
fixFixed: This update enhances the reliability of Windows Search and resolves an issue that prevented users from typing in Windows Search in some cases. Note: These fixes don't address an issue that might prevent Search from loading at all.
fixFixed: When you press ALT + Tab to switch out of a full screen app, other windows like Windows Terminal might stop responding.
fixFixed: An underlying issue might lead to unexpected changes to window size and position after sleep and resume on some devices.
fixFixed: Explorer.exe might stop working unexpectedly when a window is dragged, if window snapping is enabled.
other[Compatibility] This update removes the ltmdm64.sys driver. Fax modem hardware dependent on this specific driver will no longer work in Windows.
security[Cryptography] This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change,…
fix[Virtualization and platform compatibility] Fixed: This update addresses an issue that affects Microsoft Office applications running in Microsoft Application Virtualization (App-V) environments. The failure occurred due to a double handle closure in the AppVEntSubsystems32 or AppVEntSubsystems64…
featureNew! Find answers to commonly asked questions about Windows Server in the new FAQs section under Settings > System > About. It covers topics like system setup, performance, and compatibility—all in one place.
featureNew! The dialog to rename your printer under Settings > Bluetooth & devices > Printers & scanners now matches the Windows Server look and feel.
featureNew! Mouse settings are now easier to access under Settings > Accessibility > Mouse and Mouse pointer and touch, with no need to open Control Panel. You’ll find updated icons for Mouse pointer speed and Enhance mouse pointer precision, plus options for customizing the mouse indicator, pointer…
featureNew! Admins can configure taskbar policies so users can unpin specific apps, ensuring they are not repinned during the next policy refresh. To turn on this feature, use the new PinGeneration option.
fixFixed: When using Tab and Shift + Tab to move keyboard focus around the taskbar, if you go backwards at least once you can get keyboard focus stuck on the taskbar frame, which could lead screen readers to just say “pane.”
fixFixed: On login, the keyboard focus might unexpectedly be set to widgets in the taskbar, which can cause widgets to open.
featureNew! Voice access now includes an in-product experience that highlights new features and improvements. Use the settings menu to open or dismiss it anytime.
featureNew! You can find voice access under Accessibility in Quick Settings at the lower-right corner of your screen near the clock. To open Quick Settings, select the network, volume, or battery icon.
fixFixed: Voice access might stop responding with error “working on it” when dictating.
feature[Voice Typing] New! You control the profanity filter. When you turn it on, it masks profanity with asterisks. When you turn it off, words appear as spoken. To change the setting, open voice typing (Win + H), select the settings icon, and turn on the Filter profanity switch.
featureNew! Make last-minute edits such as cropping, rotating, and adding filters to images shared through the Windows Share window.
featureNew! When you drag a local file from File Explorer or your desktop, a tray appears at the top of your screen. Drop the file into a suggested app or select More to open the Windows share window.
featureNew! Add apps that support sharing directly to the right-click menu for local files in File Explorer or on the desktop.
fix[BitLocker] Fixed: This update addresses an issue where devices with BitLocker on removable drives could encounter a blue screen error after resuming from sleep or hybrid-booting.
fix[Bluetooth] Fixed: Settings might stop responding when loading information about Bluetooth devices.
fix[Boot menu screens] Fixed: This update addresses the issue where early boot screens, such as BitLocker PIN, BitLocker Recovery key, and boot menu screens, render slowly.
fix[Display] Fixed: Unexpected changes to screen size and window position might occur after waking from sleep for some devices.
fix[File Explorer] Fixed: If you have disconnected network drives while conducting a search from Home, it might prevent searches from executing and you remain on Home.
fixFixed: Voice typing won't start from the touch keyboard when using the Chinese (Simplified) narrow layout.
fixFixed: When using the Symbols section of the touch keyboard, pressing the key to change pages might unexpectedly insert a character into password fields.
fixFixed: Typing in some apps might stop working after disconnecting from a remote desktop session.
fix[JPG] Fixed: When using CopyPixels the pixels may be unexpectedly inverted in certain cases.
fix[Memory leak] Fixed: This update addresses an issue in the Input Service that causes increased memory usage, potentially impacting performance in multi-user, multi-lingual, and remote desktop usage.
fix[Microsoft Management Console (MMC)] Fixed: Improved the colors used in MMC when items are selected, both generally, and when contrast modes are enabled.
fix[Network] Fixed: This update addresses an issue where Windows Server 2025 always shows the network as "public" on new domain controllers. It now checks for a domain controller name before using loopback addresses to ensure proper Lightweight Directory Access Protocol (LDAP) binding.
fix[Print] Fixed: Non-admin users can't uninstall printers that they’ve added.
security[Print] To meet security goals and support new print capabilities, this update transitions Windows printing components from MSVCRT to a modern Universal C Runtime Library. As a result of this change, print clients running versions of Windows prior to Windows 10, version 2004 and Windows Server,…
otherThe printer driver is not installed on this computer. Some printer properties will not be accessible unless you install the print driver.
otherWindows cannot connect to the printer.
fix[USB] Fixed: Certain USB devices might become disconnected after sleep, until you reboot your PC.
security[App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,…
security[File server] This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already…
deprecated[PowerShell 2.0] Starting in September 2025, Windows Server 2025, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain…
fix[Display] Fixed: You might need to press the Win + P keyboard shortcut twice to switch topologies.
fix[Dynamic Host Configuration Protocol (DHCP Client)] Fixed: This update addresses an issue affecting internet connectivity on devices after resuming from sleep mode. Users might experience intermittent internet connections.
fix[ExtFloodFill] Fixed: There's an uncommon issue with ExtFloodFill where a horizontal line might appear in the incorrect location in Win32 applications.
fix[File Systems] Fixed: This update addresses an issue when the operating system stops unexpectedly, and an error message appears on a blue screen during normal usage with a user profile redirected to a network VHD(X).
fixFixed: As part of our ongoing commitment to improving File Explorer accessibility, this release includes increased support for the text scaling (Settings > Accessibility > Text size) across File Explorer, File Open/Save dialogs and the copy dialogs.
fixFixed: Improved the performance of extracting zipped files, particularly in the case where you’re unzipping a large number of small files.
fixFixed: The address bar in File Explorer might unexpectedly not show a path after opening.
fix[Graphics] Fixed: External graphics cards connected over Thunderbolt might unexpectedly not be discoverable in some cases.
fix[Hyper-V Manager] Fixed: Hyper-V Manager unexpectedly shows 0% CPU usage for virtual machines.
fix[Imaging] Fixed: This update addresses an issue where some content pages with JPEG images were not displaying.
fix[Input (known issue)] Fixed: An issue when using the Microsoft Changjie IME (input method editor) for Traditional Chinese might cause problems such as not being able to form or select words, unresponsive spacebar or blank key, incorrect word output, or a broken candidate window display. This can…
fix[Networking] Fixed: This update addresses an issue affecting Storage Spaces Direct (S2D) and Remote Direct Memory Access (RDMA) with SMB Direct in certain network configurations. Previously, the issue disrupted network setup and caused a loss of cluster management capabilities.
fixFixed: You can’t use touch gestures to view the list of apps pinned in the Start menu.
fixFixed: The Sign out and More options buttons in the Start menu account manager might not be visible with increased text size.
fixFixed: The underlines beneath the app icons in the taskbar may remain visible even after the apps have been closed.
fixFixed: If you use the arrow keys after pressing the Windows key + T, the arrows move in the wrong direction for Arabic and Hebrew display languages.
fix[Windows Setup] Fixed: If you install Windows 11, version 24H2 with Windows Setup and run System Preparation (Sysprep) afterwards, the boot file configuration is not properly updated, resulting in push-button reset options not working.
fix[Windows Update] Fixed: If you install Windows Server 2025 with Windows Setup and run System Preparation (Sysprep) afterwards, the boot file configuration is not properly updated, resulting in push-button reset options not working.
other[Desktop icons] The logic for apps pinned to the desktop has been updated, so that packaged apps no longer show an accent colored backplate. For example, if you were to drag and drop Snipping Tool from the apps list in Start to the desktop the icons should be bigger and easier to see now.
security[Fix for Azure Virtual Machines with Trusted Launch disabled] This update addresses an issue that prevented some virtual machines (VMs) from starting when Virtualization-Based Security (VBS) was enabled. It affected VMs using version 8.0 (a non-default version) where VBS was offered by the host.…
securitySecurity update: includes the July 2025 Security Updates
fix[Application installation] Fixed: The MsiCloseHandle API experiences prolonged execution time when handling MSI files containing a large number of files.
fixFixed: Kerberos authentication stops responding in certain scenarios when RC4 is used for encryption.
fixFixed: FIDO Cached Credential Logon might stop responding in certain cases when a device is Hybrid Domain Joined.
fixFixed: Opening certain apps after a password change could result in an unexpected lockout if the account lockout policy is enabled.
fix[Boot menu] Fixed: If an update stops responding and rolls back, it might result in an unnecessary and non-functional boot menu entry. This fix stops devices from encountering this issue in the future. If you have already encountered this issue, you can manage extra boot entries in the Boot…
fixFixed: Under Settings > System > Display > Color profile, go to Color management, it might not display the expected color profile list for the selected monitor.
fixFixed: The color profile settings might not be applied after resuming from sleep.
fix[Cryptography] Fixed: This update addresses an issue that was impacting Credential Roaming, preventing certificates and keys from being roamed into Active Directory and made available on users' machines.
fix[Direct 3D Ecosystem] Fixed: This update addresses an issue where certain third-party apps might stop responding on the graphics settings page.
fix[File Explorer] Fixed: In some cases, the See more menu in the File Explorer command bar opens in the wrong direction.
fix[General reliability] Fixed: An underlying issue might lead to your PC experiencing a bugcheck (blue screen) with PDC_WATCHDOG_TIMEOUT when resuming from sleep.
fix[Graphics] Fixed: There is an issue where certain third-party apps might render the graphics settings page unresponsive.
fixFixed: Improved ctfmon.exe reliability, by addressing a system restart which could impact typing.
fixFixed: ctfmon.exe might restart when copying data from certain apps.
fix[Local Administrator Password Solution (LAPS)] This update addresses an issue with Windows LAPS. LAPS settings would not be preserved after an in-place upgrade.
fix[Network] Fixed: The description of the virtual NIC doesn't display correctly in Network Connections (ncpa.cpl), showing invalid characters.
fix[OOBE] Fixed: Addresses an issue that prevents the ESP from running every time a new user logs onto the device even when configured by policy.
fix[PowerShell] Fixed: This update resolves an issue where critical PowerShell modules required for device configuration weren't run under Windows Defender Application Control (WDAC) policies.
fix[Remote desktop] Fixed: Remote Desktop won't use UDP, only TCP.
fix[Screen orientation] Fixed: Screen might unexpectedly change orientation coming out of sleep on 2-in-1 devices.
other[Task manager] Task Manager will now calculate CPU usage differently for Processes, Performance, and Users pages. It will use standard metrics to display CPU workload consistently across all pages and align with industry standards and third-party tools. To ensure backward compatibility, an…
fix[DHCP Server (known issue] Fixed: An issue in which the DHCP Server service might intermittently stop responding and affects IP renewal for clients.
feature[Narrator] New! There are new functions for Narrator scan mode. You can use the comma ( , ) to jump to the start of an item, such as a large table, long list, or other content. Use the period ( . ) to jump to the end of an item. This is especially helpful when reading long emails, news articles,…
fixFixed: Improves performance when it loads folders that have a large number of media files.
fixFixed: When you enter a URL in the address bar, it might not go to the location.
fixFixed: The address bar overlaps files when you use the F11 full-screen mode.
fixFixed: The context menu opens slowly when you right-click cloud files.
otherThumbnails for cloud files display more consistently in search results.
fix[GDI+] Fixed: After you use GDI+ to shrink an image, the colors of the image might be wrong.
fix[Get Help app] Fixed: It fails to open on Windows Server 2025.
fix[Hyper-V] Fixed: Hyper-V Quick Create shows error "Could not load file or assembly Newtonsoft.Json".
fix[Live captions] Fixed: If you disconnect an external monitor, the live captions window might not show.
fix[Mouse] Fixed: In Settings > Accessibility > Mouse pointer and touch, you can choose a color for the mouse that is not the default. When you choose a color, it reverts to white after the User Account Control (UAC) dialog appears.
fix[Open Secure Shell (OpenSSH) (known issue)] Fixed: The service fails to start, which stops SSH connections. There is no detailed logging, and you must run the sshd.exe process manually.
fixFixed: There are display rendering issues when you connect to certain PCs.
fixFixed It stops responding.
fix[Scanners] Fixed: Apps might not recognize a scanner is available when it is connected.
fix[Start menu] Fixed: The colors are wrong when you open the account manager flyout menu. This occurs when you use a mixed dark and light custom mode in Settings > Personalization > Colors.
fix[Task Manager] Fixed: It might identify a Hard Disk Drive (HDD) as a Solid State Drive (SSD).
fix[Windows Hello] Fixed: This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.
fix[Hyper-V Platform] Fixed: An issue in the direct send path for a guest physical address (GPA) where confidential virtual machines running on Hyper-V with Windows Server 2025 might intermittently stop responding or restart unexpectedly, affecting service availability and requiring manual…
feature[Fonts]New! This update includes Simsun-ExtG, a new simplified Chinese font featuring the Biangbiang noodles character. Some apps might not display these extension characters yet. supports 9,753 ideographs in Unicode Extensions G, H, and I. See the following list.
otherUnicode range G 30000-3134A (4,939 chars)
otherUnicode range H 31350-323AF (4,192 chars)
otherUnicode range I 2EBF0-2EE5D (622 chars)
feature[Settings]New! Change time zones in Settings > Time & Language > Date & Time. Admins You don’t have to be an admin to make this change.
fix[Audio] Fixed: This update addresses an issue where the audio form your microphone might mute unexpectedly.
other[Chinese Pinyin Input Method Editor (IME)] With this update, Bing will no longer provide automatic suggestions in the search box for search engines such as Baidu. To get manual suggestions, use Ctrl + Tab or the arrow button.
fix[Eye controller] Fixed: The eye controller app doesn’t launch.
fixFixed: After performing a search, it might repeat unexpectedly.
fixFixed: The date and time properties of a file might update after you copy it.
fixFixed: Icons on the details pane might not update as you expect when you change a theme. This makes it hard to view the change when you switch between dark and light themes.
fixFixed: The search box might lose input focus as you type.
fix[Memory leak] Fixed: Leaks occur when predictive input ideas show.
fixFixed: The mouse cursor might disappear. This occurs when you hover over text fields in certain applications.
fixFixed: If you turn on pointer trails, the mouse cursor becomes transparent, and a black box appears behind it.
fixFixed: The mouse cursor might stutter when it moves across the screen. This occurs even when the system is not using a lot of resources.
fix[Pinyin Input Method Editor (IME)] Fixed: When you switch app windows, the IME language might change from Chinese to English.
fix[Snipping Tool] Fixed: Snipping Tool screenshots might be distorted. This occurs when you use two or more monitors that have different display scaling.
fix[Task Manager] Fixed: After closing the app, it remains open longer than expected.
fix[USB audio device drivers] Fixed: The code 10 error message, “This device cannot start” appears. This occurs when you connect to certain external audio management devices.
security[Wi-Fi] Fixed: The Windows Security dialog might stop responding when you sign into certain Wi-Fi networks. This issue might also occur in some other options in Settings.
fix[Windows Hello] Fixed: This update addresses an edge case issue where Windows Hello doesn’t work on devices with System Guard Secure Launch or Dynamic Root of Trust for Measurement (DRTM) features enabled, preventing users from logging in with facial recognition or PIN. This issue was observed…
security[Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.
fix[Windows update installation] Fixed: Cumulative updates might not install. The error code is 0x800736b3. This occurs after a feature on demand is unable to install.
other[Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI)] This update applies improvements to SBAT for the detection of Linux systems.
security[Microsoft RPC Netlogon protocol] This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain…
securitySecurity update: includes the April 2025 Security Updates
feature[IFilters] New! Windows Search runs IFilters in Less Privileged App Containers (LPAC). LPACs are like app containers, but they minimize permissions by default. Processes running in LPACs only access necessary resources and don’t have access to sensitive system components and data. This mitigates…
feature[Input Method Editor (IME)] New! After you install this update, the IME toolbar will hide when apps are in full screen mode. This only occurs when the IME toolbar is active, and you type Chinese or Japanese characters,
feature[Narrator]New! Narrator scan mode now includes new functions. Skip past links (N) lets you navigate directly to text after a link, useful for long emails, articles, or wiki pages. Jump to lists (L) quickly accesses lists in web pages or documents. To use these features, turn on Narrator (Windows…
featureNew! The Disconnect and Logoff dialogs now support dark mode and text scaling.
featureNew! The Performance section now shows the type for each disk.
fixFixed: When you select Automatically hide the taskbar, the search box appears as an icon rather than a search box.
fixFixed: The Users page might cause Task Manager to stop responding when you use the keyboard.
fix[Authentication] This update addresses an issue affecting machine password rotation in the Identity Update Manager certificate/Public Key Cryptography for Initial Authentication (PKNIT) path. This issue occurred particularly when Kerberos was used and Credential Guard was enabled, potentially…
other[Daylight Saving Time (DST)] Update for the Aysen region in Chile to support the government DST change order in 2025. For more info about DST changes, see the Daylight Saving Time & Time Zone Blog.
fix[Deployment Image Servicing and Management (DISM)] Fixed: The StartComponentCleanup task doesn't work properly. It stops at 71% and shows error 6842.
fix[JPG files] Fixed: You cannot use an API to find rotation information.
security[Performance] Fixed: After installing the Windows security update (KB5051987), released February 11, 2025, and later updates, on Windows Server 2025 devices, the SQL Server Launchpad service might not start if SQL Server Machine Learning Services is installed.
fix[PowerShell] Fixed: The Get-WindowsCapability command sometimes stops responding. Then you must restart your PC.
fix[Remote Desktop] Fixed: This update addresses an issue where Remote Desktop sessions were freezing shortly after connection. With this issue, mouse and keyboard input became unresponsive within the session, requiring you to disconnect and reconnect.
fix[Windows Subsystem for Linux (WSL)] Fixed: It stops working and will not start up.
fix[Windows Update] Fixed: When you install an update, you might get error 0x800f0905.
fix[Windows copy] Fixed: This update addresses a memory leak that might occur during Windows copy operations.
security[OS Security] After installing this update or a later Windows update, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted regardless of whether Internet Information Services (IIS) is enabled on the target device. This behavior is part of changes…
security[Kerberos Authentication] Change of behavior: Adds protections for a vulnerability which occurs when a certificate authority is part of the Windows root store but not the NTAuth store. This change enabled by default might cause Event ID: 45 events to be logged on the domain controller. For more…
security[Windows Hello] After installing this update or a later Windows update, for enhanced security, Windows Hello facial recognition requires color cameras to see a visible face when signing in. For more information, see CVE-2025-26644.
securitySecurity update: includes the March 2025 Security Updates
featureNew! This update adds a new Narrator shortcut. To copy the last spoken content by Narrator to the clipboard, press Narrator key + Ctrl + X. This shortcut is especially useful for quickly copying content such as codes or numbers.
featureNew! It will now auto read the contents of an email message in the new Outlook, similar to how it works in classic Outlook.
feature[Networking] New! The netsh wlan show networks command can now read SSIDs that are encoded using UTF-8. This means that Wi-Fi SSIDs that have Unicode characters, such as emoji, display properly in netsh output.
other[Daylight savings time (DST)] This update supports (DST) changes in Paraguay.
fix[Live kernel debug files (dumps)] Fixed: The win32kbase.sys creates live kernel debug files when it should not.
fix[Scanning apps] Fixed: This update addresses the issue where certain scanners were not being detected despite being connected.
fix[Service for User to Self (S4U2self)] Fixed: Your device might have issues using S4U2self to authenticate. This occurs if Credential Guard is off, and the device joins an Active Directory domain that doesn't allow the RC4 cipher.
fix[sfc /scannow command] Fixed: You get errors every time you run the command.
feature[Virtual hard disk (VHD/VHDx)] New! This update adds a detach virtual hard disk button to Settings. In the properties for your VHD or VHDx, go to Settings > System > Storage > Disks & Volumes.
security[Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds more drivers to the list that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks.
fix[Winlogon] Fixed: A stop error occurs during shutdown.
securitySecurity update: includes the February 2025 Security Updates
fix[Digital/Analog converter (DAC) (known issue)] Fixed: You might experience issues with USB audio devices. This is more likely when you use a DAC audio driver based on USB 1.0. USB audio devices might stop working, which stops playback.
security[USB cameras] Fixed: Your device does not recognize the camera is on. This issue occurs after you install the January 2025 security update.