August 29, 2025—KB5064081 (OS Build 26100.5074) Preview
Applies To
Release Date:
29/08/2025
Version:
OS Build 26100.5074
Windows Secure Boot certificate expirationWindows Secure Boot certificate expiration and CA updates.
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, seeTo learn about Windows update terminology, see the pages on types of Windows updates and monthly quality update types. For an overview, see the update history page for Windows 11, version 24H2.
Follow @WindowsUpdate to find out when new content is published to the Windows release health dashboard.
Highlights
A gradual rollout distributes a release update over a period of time instead of all at once. This means that users receive the update at different times, and it might not be immediately available to all users.
-
[Recall] New! Recall opens to a personalized homepage that puts your recent activity and top-used apps and websites front and center, making it easy to pick up where you left off. After turning on snapshot collection, the homepage highlights key productivity features like Recent Snapshots, which show the latest snapshots to help you quickly resume tasks, and Top Apps and Websites, which display the three apps and websites you’ve used most in the past 24 hours. You can set filters in Settings to control which apps and websites are saved in snapshots. A new navigation bar on the leftmost side of the screen provides quick access to Home, Timeline, Feedback, and Settings.
-
[Click to Do] New! When you launch Click to Do for the first time, you'll see a quick interactive tutorial. It shows how to complete tasks faster by demonstrating actions on both text and images—such as summarizing large blocks of text or removing image backgrounds. To revisit the tutorial later, select More options > Start tutorial.
-
[General] New! When an app requests access to location, camera, microphone, or other device capabilities, Windows shows a redesigned system dialog box. To emphasize the privacy prompt, the screen dims slightly, and the prompt appears at the center of the screen.
-
[Taskbar]
-
New! The larger clock with seconds is now back in the notification center, displayed above the date and calendar. To turn this option on, go to Settings > Time & language > Date & time, and turn on Show time in the Notification Center.
-
Fixed: If you accidentally click and drag your mouse across the taskbar preview thumbnail, the preview might stop working.
-
-
[Search on the Taskbar]
-
New! When you use Search from the Windows taskbar, a new grid view will help you more quickly and accurately identify the desired image within your search.
-
New! Search on the taskbar now provides clearer status information. If your search results are incomplete while your PC is organizing files in the background, Windows shows a notice with a link to check progress. You can dismiss the notice when you're done. There is also a status for files and folders, so you can easily tell whether they’re available online (cloud) or stored on your device.
-
-
[Lock screen] New! More widget options and support for lock screen widget personalization (previously referred to as “Weather and more”) are rolling out. After initial launch with Windows Insiders in the European Economic Area (EEA), these updates are expanding to all regions. You can add, remove, and rearrange lock screen widgets such as Weather, Watchlist, Sports, Traffic, and more. Any widget that supports the small sizing option can be added. To customize your lock screen widgets, go to Settings > Personalization > Lock screen.
-
[File Explorer]
-
New! Dividers now separate top-level icons in the File Explorer context menu.
-
New! When you're signed in with a work or school account (Entra ID), File Explorer will display people icons in the Activity column and the Recommended section at the top of File Explorer Home. Hover over or select a person's icon to open their Microsoft 365 Live Persona Card, which shows who they are and how they're connected to the file.
-
Fixed: If you try to use the unblock open in Properties for a file, it still shows as blocked when you open Properties the next time.
-
-
[Windows Hello]
-
New! As part of the enhanced passkey features released in September 2023, you’ll see a redesigned Windows Hello interface. These modernized visual updates support fast, clear communication that appear across multiple authentication flows, including the Windows sign-in screen, passkey, Recall, the Microsoft Store, and more. The Windows security credential experience for passkey offers a cleaner, more intuitive interface designed to support fast, secure sign-in. You can now easily switch between authentication options such as passkeys or connected devices.
-
Fixed: Windows Hello might recognize your face on the login screen, however it would still fail and then prompt you to enter your pin. If you continue experiencing issues, you might need to go to the Facial Recognition section under Settings > Accounts >Sign-in options and select Improve recognition.
-
Improved: Fingerprint login after standby is now more robust.
-
-
[Settings]
-
New! Windows activation and expiration prompts match the Windows 11 design and appear as system notifications when action is required. There also have been improvements to messaging under Settings > System > Activation.
-
New! You can go to Settings > Privacy & security > Text and Image Generation to see which third-party apps have recently used generative AI models provided by Windows. You can also choose which apps are permitted to use them—putting you in charge of your device’s AI experience.
-
New! As part of the Copilot+ PC experience, the agent in Settings helps you quickly find and change settings. Initially available on Snapdragon®-powered Copilot+ PCs, agent in Settings now supports AMD- and Intel™-powered Copilot+ PCs. It currently works only when your primary display language is set to English.
-
Fixed: Settings might crash if you attempt to add a security key under Settings > Account > Sign-in options.
-
-
[Task Manager] New! Task Manager now uses standard metrics to show CPU workload consistently across all pages, aligning with industry standards and third-party tools. If you prefer the previous view, you can enable a new optional column called CPU Utility in the Details tab to display the earlier CPU usage value shown on the Processes page.
-
[Widgets]
-
New! Multiple dashboards are now available in your Widgets Board. This gives you more space for your favorite widgets and helps you stay informed with a feed that connects you to current events. A new navigation bar on the left side makes it easy to switch between your widget’s dashboard and other views like the Discover feed. After initial launch in the EEA, these updates are expanding to all regions.
-
New! A new visual experience is available for the Discover feed on the Widgets Board. The layout is more organized, personalized, and engaging. Copilot-curated stories are now included, offering a well-rounded view of each topic with summaries, videos, and images from trusted MSN premium publishers. To customize your feed, go to Widgets > Discover dashboard > Personalization settings.
-
-
[Windows Backup for Organizations] New! Windows Backup for Organizations is now generally available! Experience seamless device transitions with enterprise-grade backup and restore. Whether you're refreshing your organization’s devices, upgrading to Windows 11, or deploying AI-powered PCs, this solution helps sustain productivity with minimal disruption, ensuring business continuity and organizational resilience.
-
[PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain available and supported. If you use older scripts or tools that depend on PowerShell 2.0, update them to avoid compatibility issues.
-
[Live captions] Fixed: Changing the opacity of live captions in Settings > Accessibility > Captions > Caption Style, has no effect.
-
[Input]
-
Fixed: Attempting to type Chinese with an IME after copying something with CTRL + C can result in the first character not displaying.
-
Fixed: An underlying issue related to textinputframework.dll could result in certain apps like Sticky Notes and Notepad crashing.
-
-
[dbgcore.dll] Fixed: An underlying issue with dbgcore.dll could result in certain apps, including explorer.exe, crashing.
-
[Kerberos] Fixed: There might be an underlying crash in Kerberos when attempting to access a cloud file share.
-
[Login] Improved: Addressed some underlying cases which could lead to you seeing a blank white screen, or a screen saying, "just a moment", for a few minutes when logging into your PC.
-
[Miracast] Fixed: An issue where, on certain devices, audio would initially play but stop a few seconds after casting to a TV.
-
[Audio] Improved: Addressed an underlying audio service stops responding which could impact the ability to play audio in certain cases.
-
[Cryptographic Provider (known issue)] Fixed: Fixed: This update addresses an issue where you might see an error in Windows Event Viewer with Error ID 57. The event displays the following message: The 'Microsoft Pluton Cryptographic Provider' provider was not loaded because initialization failed.
Improvements
This non-security update includes quality improvements. The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.
-
[Device management] Fixed: This update addresses an issue that prevented some system recovery features from working properly due to a temporary file sharing conflict. This affected certain device management tools and disrupted key functions on some devices.
-
[File system] Fixed: An issue in Resilient File System (ReFS) where using backup apps with large files could sometimes exhaust system memory.
-
[Input]
-
Fixed: This update addresses an issue with the Chinese (Simplified) Input Method Editor (IME) where some extended characters appear as empty boxes.
-
[Fixed This update addresses an issue that prevents typing on the touch keyboard when using the Microsoft Changjie, Microsoft Bopomofo, or Microsoft Japanese Input Method Editors (IMEs). The issue occurs after switching to a previous version of the IME.
-
-
[Performance] Fixed: This update addresses an issue that slows application installation on ARM64 devices. Some installers might take longer to complete.
If you installed earlier updates, your device downloads and installs only the new updates contained in this package.
AI Components
This release updates the following AI components:
AI Component |
Version |
Image Search |
1.2508.906.0 |
Content Extraction |
1.2508.906.0 |
Semantic Analysis |
1.2508.906.0 |
Settings Model |
1.2508.906.0 |
Windows 11 servicing stack update (KB5064531)- 26100.5074
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.
Known issues in this update
Symptoms
After installing the August 2025 Windows security update (KB5063878), you might experience delays or uneven audio and video performance when using Network Device Interface (NDI) to stream or transfer feeds between PCs.
This issue affects streaming apps such as OBS Studio (Open Broadcaster Software) and NDI Tools, especially when Display Capture is enabled on the source PC. The problem can even occur under low-bandwidth conditions.
Workaround
To work around the issue, NDI recommends manually changing the NDI Receive Mode to use TCP or UDP instead of RUDP. For steps to do this, see the NDI support site: Traffic Drops After Windows Update.
The issue is under investigation, and additional information will be shared as soon as it becomes available.
Symptoms
A security improvement was included in the August 2025 Windows security update and later updates to enforce the requirement that User Account Control (UAC) prompt for administrator credentials when performing Windows Installer (MSI) repair and related operations. This improvement addressed security vulnerability CVE-2025-50173.
After installing the update, standard users might see a User Account Control (UAC) prompt in several scenarios.
-
Running MSI repair commands (such as msiexec /fu).
-
Opening Autodesk apps, including some versions of AutoCAD, Civil 3D and Inventor CAM, or when installing an MSI file after a user signs into the app for the first time.
-
Installing apps that configure per user.
-
Running Windows Installer during Active Setup.
-
Deploying packages through Manager Configuration Manager (ConfigMgr) that rely on user-specific "advertising" configurations.
-
Enabling Secure Desktop.
If a standard user runs an app that initiates an MSI repair operation without displaying UI, it will fail with an error message. For example, installing and running Office Professional Plus 2010 as a standard user will fail with Error 1730 during the configuration process.
Workaround
The following workarounds are available:
-
Run the app as an administrator (right-click the app from Start or Search, then select Run as administrator).
-
If standard users can’t run apps as administrators, IT admins can apply a special Group Policy using Known Issue Rollback (KIR) to fix the issue on Windows Server 2025, Windows Server 2022, Windows 11 (versions 22H2, 23H2, 24H2), and Windows 10 (versions 21H2, 22H2). To apply this fix, contact Microsoft Support for business. Avoid using other workarounds like disabling related features.
We are working to address this issue by allowing IT admins to permit specific apps to perform MSI repair operations without UAC prompts. This improvement will be released in a future Windows update, and details will be provided as they become available.
How to get this update
Before you install this update
Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
Install this update
To install this update, use one of the following Windows and Microsoft release channels.
Available |
Next Step |
|
|
Open Start > Settings Update & Security > Windows Update. In the Optional updates available area, you will find the link to download and install available updates. |
Available |
Next Step |
|
These changes will appear in the next security update to Windows Update for Business. |
Available |
Next Step |
||||
Yes 1 |
Before you install this update To get the standalone package(s) for this update, go to the Microsoft Update Catalog website. This KB contains one or more MSU files that require installation in a specific order. Install this update Method 1: Install all MSU files together Download all MSU files for KB5064081 from Microsoft Update Catalog and place them in the same folder (for example, C:/Packages). Use Deployment Image Servicing and Management (DISM.exe) to install the target update. DISM will use the folder specified in PackagePath to discover and install one or more prerequisite MSU files as needed. Updating Windows PC To apply this update to a running Windows PC, run the following command from an elevated Command Prompt:
Or, run the following command from an elevated Windows PowerShell prompt:
Or use Windows Update Standalone Installer to install the target update. Updating Windows Installation media To apply this update to Windows Installation media, see Update Windows installation media with Dynamic Update. Note: When downloading other Dynamic Update packages, ensure they match the same month as this KB. If the SafeOS Dynamic Update or Setup Dynamic Update is not available for the same month as this KB, use the most recently published version of each. To add this update to a mounted image, run the following command from an elevated Command Prompt:
Or, run the following command from an elevated Windows PowerShell prompt:
Method 2: Install each MSU file individually, in order Download and install each MSU file individually either using DISM or Windows Update Standalone Installer in the following order:
|
1 This latest cumulative update includes updates for AI components. Even though the AI component updates are included in the update, the AI components are only applicable to Windows Copilot+ PCs and will not install on Windows PC or Windows Server.
Available |
Next Step |
|
You can import this update into Windows Server Update Services (WSUS) manually. See the Microsoft Update Catalog for instructions. |
If you want to remove the LCU
To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.
Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.
File information
For a list of the files provided in this update, download the file information for cumulative update 5064081.
For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5064531) - version 26100.5074.