October 28, 2025—KB5067036 (OS Builds 26200.7019 and 26100.7019) Preview
Applies To
Release Date:
28/10/2025
Version:
OS Builds 26200.7019 and 26100.7019
This non-security update for Windows 11, version 24H2 (KB5067036), improves functionality, performance, and reliability. To learn more about differences between security updates, optional non-security preview updates, Out-of-band (OOB) updates, and continuous innovation, see Windows monthly updates explained. For information on Windows update terminology, see the different types of Windows software updates.
To view the latest updates about this release, visit the Windows release health dashboard or the update history page for Windows 11, version 24H2 and version 25H2.
Announcements and messages
This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices.
Windows Secure Boot certificate expiration
Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely if not updated in time. To avoid disruption, we recommend reviewing the guidance and taking action to update certificates in advance. For details and preparation steps, see Windows Secure Boot certificate expiration and CA updates.
Highlights
This update is available through two release phases: gradual rollout and normal rollout. A gradual rollout delivers an update in phases, so features reach devices over time instead of all at once, meaning availability varies by device. A normal rollout is the broad release to all eligible devices at the same time, usually when it reaches general availability (GA).
The following summary outlines features from Copilot experiences and AI-powered Windows 11 PC experiences, along with improvements and fixes. The bold text within the brackets indicates the item or area of the change.
For more info on the different AI experiences, see aka.ms/copilotpluspcs.
This section highlights updates and improvements unique to Copilot+ PCs, focusing on AI-powered features, performance enhancements, and user experience optimizations.
-
[Click to Do]
-
New! 1 The prompt box in Click to Do streamlines interaction with Copilot, helping you work more efficiently. You can type a custom prompt directly into the text box, which sends your prompt and selected on-screen content to Copilot. Suggested prompts appear below the text box and are powered locally by Phi-Silica. These suggestions are available for text selections in English, Spanish, and French.
-
New! 1 You can now translate on-screen text using Microsoft Copilot with the Click to Do feature. When you select text in a different language than your Windows display language or preferred language setting, Copilot suggests a translation. After you choose to translate, the translated text appears in the Copilot app. You can see the supported regions and languages in Microsoft Copilot.
-
New! 1 Click to Do helps you convert units like length, area, volume, height, temperature, and speed. Hover over a number and unit pair to see a floating tooltip with the conversion. Select the number and unit to open a context menu with more conversion options. You can also access additional conversions through the Copilot app.
-
New! Press and hold two fingers anywhere on your Copilot+ PC touchscreen to open Click to Do. This gesture simultaneously opens Click to Do, selects the item beneath your fingers, and displays relevant actions.
-
New! You can now select objects in Click to Do using Freeform Selection, Rectangle Selection, or Ctrl + click. To use Freeform Selection Mode, select the Freeform button on the toolbar, then use your pen or finger to draw freely around the items you want to select. To use Rectangle Selection Mode, select the Rectangle Selection button on the toolbar, then drag a box around the items. Everything inside the rectangle will be selected. You can also use Ctrl + Click to select multiple types of items—such as text and images—by holding down the Ctrl key and selecting each item.
-
New! Live Persona Cards from Microsoft 365 now appear in Click to Do. To view a profile card, press Windows key + click on an email address from your organization.
-
New! Visual cues now make key items, such as emails, tables, and more, light up on your screen as you open Click to Do.
-
Fixed: Click to Do might unexpectedly invoke sometimes when pressing Windows key + P.
-
-
[File Explorer] New!2 When you hover over a file in File Explorer Home, commands such as “Open file location” and “Ask Copilot” appear as quick actions. This experience is available if you’re signed in with a Microsoft account. Support for work and school account (Entra ID) will be available in a future update.
-
[Voice access]
-
New! Fluid Dictation in voice access makes voice-based dictation smoother and smarter. It helps correct grammar, punctuation, and filler words in real time. Powered by on-device small language models (SLMs), it offers fast and private processing. Fluid Dictation is on by default—just open the Voice Access app to start. To turn it on or off, go to Settings or say Turn on Fluid Dictation or Turn off Fluid Dictation. You can use it in most text input apps, but it’s disabled in secure fields like passwords or PINs Fluid Dictation is available in all English locales on Copilot+ PCs.
-
New! You can now configure a delay before a voice command is executed. To set this up, go to Voice access settings > Wait time before acting, and select the option that best matches your preferences.
-
New! Voice access now supports Japanese, expanding accessibility for more users. You can now navigate, dictate, and interact with Windows using voice commands. With this update, Windows users who speak Japanese can enjoy a hands-free, voice-powered PC experience.
-
Fixed: Voice access unexpectedly stops working, showing error code 9001.
-
-
[Agent in Settings] New! The new agent in the Settings experience now supports French.
-
[Improved Windows Search] New! The Improved Windows Search feature, now available through controlled rollout (CFR), is available on all Copilot+ PCs.
1Feature availability depends on your device and market. This feature isn’t available in the European Economic Area or China. Learn more about Copilot+ PCs at aka.ms/copilotpluspcs.
2Feature availability depends on your device and market. This feature isn’t available in the European Economic Area. Learn more about Copilot+ PCs at aka.ms/copilotpluspcs
This section highlights new features and enhancements for Windows 11 PCs, including AI-powered capabilities, continuous innovation, and performance improvements.
Improvements and fixes
-
[Start menu] New! The redesigned Start menu, built to help you access your apps more quickly and smoothly. Its redesigned layout makes it easier than ever to find what you need.
-
Scrollable ‘All’ section: The main page now includes a scrollable “All” section, making it easier to find apps.
-
Category and grid views: Switch between two new views—category view, which groups apps by type and highlights frequently used ones, and grid view, which lists apps alphabetically with more horizontal space for easier scanning. The menu remembers your last selected view.
-
Responsive layout: The Start menu adapts to your screen size. Larger displays show more pinned apps, recommendations, and categories by default. Sections like Pinned and Recommended expand or collapse based on content. You can customize these views under Settings > Personalization > Start.
-
Phone Link integration: A new mobile device button next to Search lets you expand or collapse content from your connected phone. This feature supports Android and iOS devices in most markets and will roll out to the European Economic Area (EEA) in 2025.
-
-
[File Explorer]
-
New! 3 Recommended files in File Explorer Home are now available for personal Microsoft accounts and local accounts. These files include content you frequently use, have recently downloaded, or added to your File Explorer Gallery. If you prefer not to see the recommended section in File Explorer Home, you can turn it off in File Explorer Folder Options. When this feature is turned off, folders pinned to Quick Access will appear instead.
-
New! StorageProvider APIs are now available for cloud providers to integrate with File Explorer Home. Developers can learn to enable the system to query for suggested files.
-
Fixed: The File Explorer context menu might unexpectedly switch back and forth between the normal view and Show More Options on each right click.
-
Fixed: When opening a folder from another app (for example, opening the Downloads folder from a browser), your custom view — including sorting files by name, changing the icon size, or removing grouping — unexpectedly resets back to default.
-
Fixed: The body of the File explorer window might no longer respond to mouse clicks after invoking the context menu.
-
Fixed: Extracting very large archive folders (1.5gb+) might fail with a “Catastrophic Error” (error code 0x8000FFFF).
-
Fixed: File Explorer might become unresponsive when opening Home.
-
-
[Lock screen] New! The new battery icons, which include color indicators and battery percentage, now appear in the lower-right corner of the lock screen. This feature makes it easier to check your device’s charging status and battery level at a glance. To learn more about the battery icon feature, see Taskbar.
-
[Microsoft 365 Copilot] New! A new Microsoft 365 Copilot page has been added to the Get Started experience for commercial devices with an active Microsoft 365 subscription. This page helps you learn about Microsoft 365 Copilot features and begin using them more easily.
-
[Settings] New! The “Email & accounts” section is now called “Your accounts.” You manage all your accounts under Settings > Accounts.
-
[Taskbar]
-
New! The battery icons have been updated to make it easier to check your PC’s status at a glance. Color indicators show charging and battery levels: green indicates the PC is charging and in good condition, yellow shows that battery saver mode is on at 20% or below, and red signals a critically low battery. Simplified overlays keep the progress bar visible, and the icons appear in the system tray, Quick Settings, and Settings, with Lock screen support coming soon. To show the battery percentage next to the icon, go to Settings > System > Power & battery, then turn on Battery Percentage. You can still view detailed battery information by hovering over the battery icon or opening the Power & battery settings.
-
Fixed: If you hover over an app icon on the taskbar, and then select the window preview, the preview might dismiss and not bring the window to the foreground.
-
-
[Administrator Protection Preview] New! Administrator protection aims to protect free floating admin rights for administrators. It enables users to perform administrative tasks using just-in-time privileges. This feature is turned off by default and can be enabled using OMA-URI in Microsoft Intune or through Group Policy.
-
[Display and Graphics]
-
Fixed: Apps and browsers might display partially unresponsive onscreen content when other maximized or full-screen apps are updating in the background. This issue is especially noticeable when scrolling, as only parts of the window content might update.
-
Fixed: After you install KB5064081, some videos and games might be unexpectedly red.
-
Fixed: If the Connected Devices Platform Service is disabled, Settings might stop responding or close unexpectedly when you try to open Settings > System > Display, including when launched from the desktop context menu.
-
-
[Input] Fixed: An issue with microsoft.ink.dll and related APIs might cause pen and handwriting input to stop responding in apps or lead to apps closing unexpectedly due to thrown exceptions.
-
[Narrator] Fixed: Narrator fails when trying to launch it while setting up Windows using an ISO.
-
[Open and Save Dialog] Fixed: Certain apps might become unresponsive when launching the Open or Save Dialog.
-
[Remote Credential Guard] Fixed: Remote Credential Guard scenarios between the latest Windows 11 builds and Windows Server 2022 or earlier might unexpectedly fail.
-
[Sign in to your PC]: Improved: Made underlying changes to improve the performance of loading the taskbar after unlocking your PC from sleep. This also helps in cases where the password field and other sign-in screen contents didn’t render when transitioning from the lock screen to the sign-in screen after sleep.
-
[Task Manager] Fixed: Some apps might unexpectedly not be grouped with their processes.
-
[Windows Update]
-
Improved: Addressed underlying issue which can cause “Update and shutdown” to not actually shut down your PC after updating.
-
Improved: Addressed underlying issue which can cause Windows Update to fail to install with error 0x800f0983.
-
-
3Feature availability depends on your device and market. This feature isn’t available in the European Economic Area.
This non-security update includes quality improvements. The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.
-
[Authentication]
-
Fixed: An issue that caused an ACCESS_DENIED error when users attempted to change passwords remotely on member servers or workgroup devices, even when they had the required permissions.
-
Fixed: This update addresses an issue that affects the Kerberos Key Distribution Center (KDC) service on server domain controllers. When the KDC service is manually stopped, the server cannot retrieve Kerberos tickets.
-
After installing the September 2025 security update for Windows Server 2022 (KB5065432), you might experience repeated reauthentication issues with Active Directory Federation Services (AD FS).
-
-
[Display] Fixed: After the latest updates, text may not render correctly when editing content within a multiline text box in certain apps.
-
[Installation (known issue)] Fixed: The Media Creation tool (version 26100.6584), released on September 29, 2025, might not work as expected on devices with Arm64. Users may encounter an error message such as: “We’re not sure what happened, but we're unable to run this tool on your PC." This is a known issue for Windows 11, version 25H2.
-
[Media (known issue)] Fixed: This update addresses an issue where protected content playback fails on some machines after installing KB5064081.
-
[Networking (known issue)] Fixed: An issue occurred where web servers using HTTP.sys (such as Internet Information Services [IIS]) rejected incoming HTTP requests with a “NOT_SUPPORTED” error.
-
[Screen readers] Fixed: After the latest updates, screen readers may unexpectedly say "legacy window" without reading out the window contents when interacting with certain apps.
If you installed earlier updates, your device downloads and installs only the new updates contained in this package.
AI Components
This release updates the following AI components:
|
AI Component |
Version |
|
Image Search |
1.2510.1152.0 |
|
Content Extraction |
1.2510.1152.0 |
|
Semantic Analysis |
1.2510.1152.0 |
|
Settings Model |
1.2510.1152.0 |
Windows 11 servicing stack update (KB5067035)- 26100.7010
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. To learn more about SSUs, see Simplifying on-premises deployment of servicing stack updates.
Known issues in this update
Microsoft is not currently aware of any issues with this update.
How to get this update
Before you install this update
Microsoft combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
Install this update
To install this update, use one of the following Windows and Microsoft release channels.
|
Available |
Next Step |
|
|
|
Open Start > Settings Update & Security > Windows Update. In the Optional updates available area, you will find the link to download and install available updates. |
|
Available |
Next Step |
|
|
These changes will appear in the next security update to Windows Update for Business. |
|
Available |
Next Step |
||||
|
Yes 4 |
Before you install this update To get the standalone package(s) for this update, go to the Microsoft Update Catalog website. This KB contains one or more MSU files that require installation in a specific order. Install this update Method 1: Install all MSU files together Download all MSU files for KB5067036 from Microsoft Update Catalog and place them in the same folder (for example, C:/Packages). Use Deployment Image Servicing and Management (DISM.exe) to install the target update. DISM will use the folder specified in PackagePath to discover and install one or more prerequisite MSU files as needed. Updating Windows PC To apply this update to a running Windows PC, run the following command from an elevated Command Prompt:
Or, run the following command from an elevated Windows PowerShell prompt:
Or use Windows Update Standalone Installer to install the target update. Updating Windows Installation media To apply this update to Windows Installation media, see Update Windows installation media with Dynamic Update. Note: When downloading other Dynamic Update packages, ensure they match the same month as this KB. If the SafeOS Dynamic Update or Setup Dynamic Update is not available for the same month as this KB, use the most recently published version of each. To add this update to a mounted image, run the following command from an elevated Command Prompt:
Or, run the following command from an elevated Windows PowerShell prompt:
Method 2: Install each MSU file individually, in order Download and install each MSU file individually either using DISM or Windows Update Standalone Installer in the following order:
|
4 This latest cumulative update includes updates for AI components. Even though the AI component updates are included in the update, the AI components are only applicable to Windows Copilot+ PCs and will not install on Windows PC or Windows Server.
|
Available |
Next Step |
|
|
You can import this update into Windows Server Update Services (WSUS) manually. See the Microsoft Update Catalog for instructions. |
If you want to remove the LCU
To remove the LCU after installing the combined SSU and LCU package, use the DISM/Remove-Package command line option with the LCU package name as the argument. You can find the package name by using this command: DISM /online /get-packages.
Running Windows Update Standalone Installer (wusa.exe) with the /uninstall switch on the combined package will not work because the combined package contains the SSU. You cannot remove the SSU from the system after installation.
File information
For a list of the files provided in this update, download the file information for cumulative update 5067036.
For a list of the files provided in the servicing stack update, download the file information for the SSU (KB5067035) - version 26100.7010.