Windows Server 26100.6901 → 26100.32522
9 releases · 0 breaking changes · 10 security fixes · 0 advisories fixed
10security0breaking1deprecated13feature28fix
Breaking changes
None in the release notes.
Security changes
- security [Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error. in 26100.32370
- security [Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App. in 26100.32234
- security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 26100.32230
- security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 26100.32230
- security [PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content. in 26100.7462
- security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 26100.7171
- security [Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings. in 26100.7171
- security [Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 26100.7171
- security [Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are… in 26100.7171
- security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 26100.6905
Deprecations
- deprecated [PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain… in 26100.7462
Every release in between
feature[Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. This targeting is based primarily on client device diagnostic data; due to limited data,…
other[System services and reliability] Improved: Windows Server 2025 now supports newer server platforms that expose more hardware error reporting features, including systems with up to 64 Machine Check Architecture (MCA) banks. This update ensures Windows parses and configures all supported error…
fix[File Explorer] Fixed: This update addresses an issue where folder renaming with desktop.ini files in File Explorer isn't work correctly. The LocalizedResourceName setting is ignored, so custom folder names don't appear.
other[Fonts & Display] Updates the Chinese fonts to support the GB18030‑2022A standard for character coverage and display.
security[Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error.
fix[Performance & Reliability] Fixed: This update disables the forwarded I/O feature in the NVMe stack by default.
featureNew! DNS over HTTPS (DoH) support for Windows DNS Server is now available in public preview. This preview enables evaluation of DoH for traffic between the server and its clients. This is intended for feedback only. It isn’t supported for production use, and it might contain issues. Functionality…
featureNew! Windows Server now supports random shuffling of resource records in DNS Server responses. This helps reduce scenarios where a single resource record becomes overloaded because it appears first in the returned list. To enable, create a DWORD registry key named “RandomShuffle” at: Registry Key:…
fix[File System] Fixed: After installing the Windows update released on and after January 13, 2026, some applications became unresponsive or encountered unexpected errors when opening files from or saving files to cloud-based storage, such as OneDrive or Dropbox. In certain Outlook configurations…
security[Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App.
other[Compatibility] This update removes the following modem drivers: agrsm64.sys (x64), agrsm.sys (x86), smserl64.sys (x64) and smserial.sys (x86). Modem hardware dependent on these specific drivers will no longer work in Windows.
security[Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote…
fix[Networking (known issue)] Fixed: This update addresses an issue where you might experience RemoteApp connection failures in Azure Virtual Desktop (AVD) environments. This might occur after installing KB5072033.
fix[Servicing (known issue] This update addresses an issue where devices that installed the out-of-band update (KB5070881) stopped receiving Hotpatch updates. Affected machines will resume Hotpatch updates after installing the January 2026 baseline update.
feature[Secure Boot] Starting with this update, Windows quality updates include a subset of high confidence device targeting data that identifies devices eligible to automatically receive new Secure Boot certificates. Devices will receive the new certificates only after demonstrating sufficient…
feature[Windows Deployment Services (WDS] This update introduces a change in behavior in which WDS will stop supporting hands-free deployment functionality by default. Detailed guidance for IT administrators is available in Windows Deployment Services (WDS) Hands‑Free Deployment Hardening Guidance.
security[WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a…
feature[File Explorer] New! Dividers now separate top-level icons in the File Explorer context menu.
feature[General] New! When an app requests access to location, camera, microphone, or other device capabilities, Windows shows a redesigned system dialog box. To emphasize the privacy prompt, the screen dims slightly, and the prompt appears at the center of the screen.
feature[Search on the Taskbar] New! When you use Search from the Windows taskbar, a new grid view will help you more quickly and accurately identify the desired image within your search.
feature[Settings] New! Windows activation and expiration prompts match the Windows 11 design and appear as system notifications when action is required. There also have been improvements to messaging under Settings > System > Activation.
featureNew! The larger clock with seconds is now back in the notification center, displayed above the date and calendar. To turn this option on, go to Settings > Time & language > Date & time, and turn on Show time in the Notification Center.
fixFixed: If you accidentally click and drag your mouse across the taskbar preview thumbnail, the preview might stop working.
feature[Task Manager] New! Task Manager now uses standard metrics to show CPU workload consistently across all pages, aligning with industry standards and third-party tools. If you prefer the previous view, you can enable a new optional column called CPU Utility in the Details tab to display the earlier…
deprecated[PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain…
other[Audio] Improved: Addressed an underlying audio service stops responding which could impact the ability to play audio in certain cases.
fix[Active Directory (known issue)]) Fixed: This update addresses an issue that occurs when you use ntdsutil.exe with 8KB database pages during an in-place upgrade to Windows Server 2025. The issue could damage the NTDS.dit database and prevent the Domain Controller from mounting it.
fix[Cryptographic Provider (known issue)] Fixed: Fixed: This update addresses an issue where you might see an error in Windows Event Viewer with Error ID 57. The event displays the following message: The 'Microsoft Pluton Cryptographic Provider' provider was not loaded because initialization failed.
fix[dbgcore.dll] Fixed: An underlying issue with dbgcore.dll could result in certain apps, including explorer.exe, crashing.
fix[Device management] Fixed: This update addresses an issue that prevented some system recovery features from working properly due to a temporary file sharing conflict. This affected certain device management tools and disrupted key functions on some devices.
fix[File system] Fixed: An issue in Resilient File System (ReFS) where using backup apps with large files could sometimes exhaust system memory.
fixFixed: Attempting to type Chinese with an IME after copying something with CTRL + C can result in the first character not displaying.
fixFixed: An underlying issue related to textinputframework.dll could result in certain apps like Sticky Notes and Notepad crashing.
fixFixed: This update addresses an issue with the Chinese (Simplified) Input Method Editor (IME) where some extended characters appear as empty boxes.
fix[Fixed This update addresses an issue that prevents typing on the touch keyboard when using the Microsoft Changjie, Microsoft Bopomofo, or Microsoft Japanese Input Method Editors (IMEs). The issue occurs after switching to a previous version of the IME.
fix[Kerberos] Fixed: There might be an underlying crash in Kerberos when attempting to access a cloud file share.
fix[Live captions] Fixed: Changing the opacity of live captions in Settings > Accessibility > Captions > Caption Style, has no effect.
other[Login] Improved: Addressed some underlying cases which could lead to you seeing a blank white screen, or a screen saying, "just a moment", for a few minutes when logging into your PC.
security[PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content.
other[System Components] The AppX Deployment Service (Appxsvc) has moved to Automatic startup type to improve reliability in some isolated scenarios.
fix[Upgrade to Windows Server 2025] Fixed: On some Intel C2030 systems with Samsung Non-Volatile Memory Express (NVMe) devices running Windows Server 2022, the upgrade to Windows Server 2025 might fail. Affected systems might fail to boot with error code 0x7B indicating INACCESSIBLE_BOOT_DEVICE…
feature[Start menu] New! We are adding a Boolean option to the Configure Start Pins policy to allow admins to apply Start menu pins once. This means that a user will receive admin pins on day 0 but can then make any changes to their Start pinned layout and have those changes safeguarded.
feature[Post-Quantum Cryptography] New! Building on post-quantum cryptography (PQC) algorithms in SymCrypt, this update adds API support for NIST post-quantum cryptography algorithms ML-KEM and ML-DSA in accordance with FIPS 203 and FIPS 204 standards. These algorithms can be used for key exchange,…
fixFixed: This update addresses an issue in Active Directory where duplicate entries could be added to a multi-valued attribute that requires unique values. Schema modifications to these attributes could result in replication failures due to a schema mismatch.
fixFixed: This update addresses an issue that could cause incomplete synchronization of large Active Directory groups (over 10,000 members) when using the directory synchronization (DirSync) control for on-premises Active Directory Domain Services (AD DS). This problem occurred after installing…
security[App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows…
security[Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings.
fix[Desktop icons] Fixed: If you have an app pinned to your desktop and it updates, the app icon might not display correctly and instead show a white page.
fixFixed: If you open More options in File Explorer to view the full list of folders for the current path, the dropdown menu might not display completely, making the bottom part inaccessible.
fixFixed: File operation progress dialogs might stop appearing when displayed from apps.
fixFixed: Syncing more SharePoint sites to File Explorer might slow performance when navigating folders or opening the context menu. This can also affect how quickly files launch.
fixFixed: File Explorer Home might unexpectedly only display a single folder (for example, Desktop), rather than the expected content with recent files and more.
other[Graphics] An issue where external graphics cards connected through Thunderbolt weren’t always recognized in some cases.
fix[Notifications] Fixed: When you select a Windows notification, it might not bring the related app to the foreground as expected—for example, this can happen with Outlook notifications.
fix[Settings] Fixed: Settings might stop responding when you try to save Wi-Fi network credentials.
security[Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios.
security[Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are…
fix[Networking] Fixed: This update fixes an issue in the HTTP.sys request parser, a Windows component that reads and processes HTTP requests. The parser allowed a single line break within HTTP/1.1 chunk extensions, where the RFC 9112 standard requires a carriage return and line feed (CRLF) sequence…
security[Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287.