KB5055767: Safe OS Dynamic Update for Windows Server, version 23H2: April 8, 2025

Applies To
Windows Server, version 23H2

Summary

This update makes improvements to the Windows recovery environment (WinRE) in Windows Server, version 23H2.

How to get this update

Install this update

To install this update, use one of the following release channels.


Available Next step
Available This update is available through Windows Update. It will be downloaded and installed automatically.
Prerequisites There are no prerequisites to apply this update.
Restart information You do not have to restart your device after you apply this update.
Removal information This update cannot be removed once it is applied to a Windows image.
Update replacement information This update replaces the previously released update KB5050118.
Verify the installation of this update After installing this update, the WinRE version installed on the device should be 10.0.25398.1545.
Methods to verify the WinRE version installed

Run the following PowerShell script "GetWinReVersion.ps1" with Administrator credentials. After you run the script, you should receive the installed WinRE version as in the following example:

GetWinREVersion Screenshot

GetWinReVersion.ps1 PowerShell script


################################################################################################

#

# Copyright (c) Microsoft Corporation.

# Licensed under the MIT License.

#

# THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

# SOFTWARE.

#

################################################################################################


# Function to get WinRE path

function GetWinREPath {

    $WinRELocation = (reagentc /info | Select-String "Windows RE location")

    if ($WinRELocation) {

        return $WinRELocation.ToString().Split(':')[-1].Trim()

    } else {

        Write-Host "Failed to find WinRE path" -ForegroundColor Red

        exit 1

    }

}

 
# Creates and needs to be return the mount directory
function GetMountDir {
    # systemdirve\mnt
    $MountDir = "$env:SystemDrive\mnt"
    if (-not (Test-Path $MountDir)) {
        New-Item -ItemType Directory -Path $MountDir -Force | Out-Null
    }
    return $MountDir
}  

# Function to get WinRE version
function GetWinREVersion {

    $mountedPath = GetMountDir
    $filePath = "$mountedPath\Windows\System32\winpeshl.exe"

    $WinREVersion = (Get-Item $filePath).VersionInfo.FileVersionRaw.Revision

    return [int]$WinREVersion

}

# Main Execution

$WinREPath = GetWinREPath

# Make dir C:\mnt if not exists

$TempDir = GetMountDir

# Get the read write permission for this directory

if (-not (Test-Path $TempDir)) {

    New-Item -ItemType Directory -Path $TempDir -Force | Out-Null

}

# Mount WinRE image

dism /Mount-Image /ImageFile:"$WinREPath\winre.wim" /Index:1 /MountDir:"$TempDir"

$WinREVersion = GetWinREVersion

Write-Host "WinRE Version: $WinREVersion" -ForegroundColor Cyan

dism /Unmount-Image /MountDir:"$TempDir" /Discard

Remove-Item -Path $TempDir -Force -Recurse

File information

The English (United States) version of this software update installs files that have the following attributes. This update might contain files for additional languages.

For all supported X64-based versions
File name File version Date Time File size
skci.dll 10.0.25398.640 28-Mar-25 1:55 336,232
bootmgfw.efi 10.0.25398.640 28-Mar-25 1:55 2,644,336
bootmgr.efi 10.0.25398.640 28-Mar-25 1:55 2,627,456
boot.stl Not versioned 28-Mar-25 1:55 10,895
winsipolicy.p7b Not versioned 28-Mar-25 1:55 10,341
winload.exe 10.0.25398.1545 28-Mar-25 1:55 1,709,736
winload.efi 10.0.25398.1545 28-Mar-25 1:55 3,067,128
BootMenuUX.dll 10.0.25398.1545 28-Mar-25 1:55 229,376
driversipolicy.p7b Not versioned 28-Mar-25 1:55 228,546
ci.dll 10.0.25398.1545 28-Mar-25 1:55 1,055,152
driver.stl Not versioned 28-Mar-25 1:55 32,631
bootmgfw.efi 10.0.25398.1545 28-Mar-25 1:55 2,647,472
bootmgfw_EX.efi 10.0.26100.30169 28-Mar-25 1:55 2,774,808
cmi2migxml.dll 10.0.25398.1180 28-Mar-25 1:55 222,688
csiagent.dll 10.0.25398.1180 28-Mar-25 1:55 714,208
diagER.dll 10.0.25398.1180 28-Mar-25 1:55 95,712
hwcompat.dll 10.0.25398.1180 28-Mar-25 1:55 239,088
hwcompat.txt Not versioned 28-Mar-25 1:55 969,028
hwexclude.txt Not versioned 28-Mar-25 1:55 51
icbexclusion.inf Not versioned 28-Mar-25 1:55 7,222
migapp.xml Not versioned 28-Mar-25 1:55 654,548
migcore.dll 10.0.25398.1180 28-Mar-25 1:55 9,270,768
mighost.exe 10.0.25398.1180 28-Mar-25 1:55 284,032
migres.dll 10.0.25398.1180 28-Mar-25 1:55 26,120
migisol.dll 10.0.25398.1180 28-Mar-25 1:55 144,880
migstore.dll 10.0.25398.1180 28-Mar-25 1:55 1,295,864
migsys.dll 10.0.25398.1180 28-Mar-25 1:55 460,144
MXEAgent.dll 10.0.25398.1180 28-Mar-25 1:55 386,432
AppExtAgent.dll 10.0.25398.1180 28-Mar-25 1:55 484,848
offline.xml Not versioned 28-Mar-25 1:55 41,994
oscomps.xml Not versioned 28-Mar-25 1:55 449,323
oscomps.woa.xml Not versioned 28-Mar-25 1:55 249,101
osfilter.inf Not versioned 28-Mar-25 1:55 21,299
pnppropmig.dll 10.0.25398.1180 28-Mar-25 1:55 103,912
ReserveManager.dll 10.0.25398.1180 28-Mar-25 1:55 308,720
setupplatform.cfg Not versioned 28-Mar-25 1:55 12,571
setupplatform.dll 1.80.25398.1180 28-Mar-25 1:55 9,209,352
setupplatform.exe 1.80.25398.1180 28-Mar-25 1:55 243,184
SFCN.dat Not versioned 28-Mar-25 1:55 1,824
SFLCID.dat Not versioned 28-Mar-25 1:55 1,644
SFLISTW7.dat Not versioned 28-Mar-25 1:55 1,703,368
SFLISTW8.dat Not versioned 28-Mar-25 1:55 2,608,858
SFLISTWB.dat Not versioned 28-Mar-25 1:55 3,172,904
SFLISTWT.dat Not versioned 28-Mar-25 1:55 4,935,402
sflistw8.woa.dat Not versioned 28-Mar-25 1:55 954,436
SFLISTRS1.dat Not versioned 28-Mar-25 1:55 5,593,182
sflistwb.woa.dat Not versioned 28-Mar-25 1:55 1,150,134
sflistwt.woa.dat Not versioned 28-Mar-25 1:55 2,636,814
SFPAT.inf Not versioned 28-Mar-25 1:55 11,602
SFPATW7.inf Not versioned 28-Mar-25 1:55 17,396
SFPATW8.inf Not versioned 28-Mar-25 1:55 79,818
SFPATWB.inf Not versioned 28-Mar-25 1:55 91,635
SFPATWT.inf Not versioned 28-Mar-25 1:55 165,729
SFPATRS1.inf Not versioned 28-Mar-25 1:55 169,730
unbcl.dll 10.0.25398.1180 28-Mar-25 1:55 1,082,848
upgradeagent.dll 10.0.25398.1180 28-Mar-25 1:55 3,306,976
upgradeagent.xml Not versioned 28-Mar-25 1:55 70,907
upgrade_comp.xml Not versioned 28-Mar-25 1:55 6,054
upgrade_bulk.xml Not versioned 28-Mar-25 1:55 211,085
upgrade_data.xml Not versioned 28-Mar-25 1:55 41,750
upgrade_frmwrk.xml Not versioned 28-Mar-25 1:55 18,785
upgWow_bulk.xml Not versioned 28-Mar-25 1:55 114,707
uninstall.xml Not versioned 28-Mar-25 1:55 4,639
uninstall_data.xml Not versioned 28-Mar-25 1:55 11,122
wdsutil.dll 10.0.25398.1180 28-Mar-25 1:55 349,664
WinSetupMon.hiv Not versioned 28-Mar-25 1:55 8,192
WinSetupMon.sys 10.0.25398.1180 28-Mar-25 1:55 132,608
netio.sys 10.0.25398.1545 28-Mar-25 1:55 656,816
ntdll.dll 10.0.25398.1545 28-Mar-25 1:55 2,265,864
ntoskrnl.exe 10.0.25398.1545 28-Mar-25 1:55 12,686,752
ntkrla57.exe 10.0.25398.1545 28-Mar-25 1:55 11,445,664
diagtrack.dll 10.0.10586.0 28-Mar-25 1:55 1,365,856
diagtrackrunner.exe 10.0.10586.0 28-Mar-25 1:55 88,256
reagent.admx Not versioned 28-Mar-25 1:55 1,240
reagent.dll 10.0.25398.1180 28-Mar-25 1:55 603,632
reagent.xml Not versioned 28-Mar-25 1:55 837
SetupPlatform.cfg Not versioned 28-Mar-25 1:55 19,051
wdscore.dll 10.0.25398.1180 28-Mar-25 1:55 275,952
wdsclientapi.dll 10.0.25398.1180 28-Mar-25 1:55 267,784
wdscsl.dll 10.0.25398.1180 28-Mar-25 1:55 79,336
wdsimage.dll 10.0.25398.1180 28-Mar-25 1:55 124,560
wdstptc.dll 10.0.25398.1180 28-Mar-25 1:55 186,000
fvevol.sys 10.0.25398.1545 28-Mar-25 1:55 898,464
dumpfve.sys 10.0.25398.1545 28-Mar-25 1:55 146,104
fveapibase.dll 10.0.25398.1545 28-Mar-25 1:55 507,904
fveapi.dll 10.0.25398.1545 28-Mar-25 1:55 1,097,728
tcpip.sys 10.0.25398.1545 28-Mar-25 1:55 3,274,184
FWPKCLNT.SYS 10.0.25398.1545 28-Mar-25 1:55 570,808
tcpipreg.sys 10.0.25398.1545 28-Mar-25 1:55 81,920
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 227,840
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 228,864
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 224,768
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 229,376
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 228,352
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 229,888
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 227,328
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 218,624
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 225,792
tcpip.sys.mui 10.0.25398.1545 28-Mar-25 1:55 216,576
winpeshl.exe 10.0.25398.1545 28-Mar-25 1:55 53,248
wpeutil.dll 10.0.25398.1545 28-Mar-25 1:55 155,648
wpeutil.exe 10.0.25398.1545 28-Mar-25 1:55 36,864
wpeinit.exe 10.0.25398.1545 28-Mar-25 1:55 57,344
startnet.cmd Not versioned 28-Mar-25 1:55 9
StartRep.exe 10.0.25398.1545 28-Mar-25 1:55 671,744
RecEnv.exe 10.0.25398.1545 28-Mar-25 1:55 411,064
BootRec.exe 10.0.25398.1545 28-Mar-25 1:55 184,320
ntdll.dll 10.0.25398.1545 28-Mar-25 1:55 1,747,536
fveapibase.dll 10.0.25398.1545 28-Mar-25 1:55 426,496
fveapi.dll 10.0.25398.1545 28-Mar-25 1:55 883,712
wdsnbp.com Not versioned 28-Mar-25 1:55 30,832
abortpxe.com Not versioned 28-Mar-25 1:55 79
bootmgr.exe 10.0.25398.1545 28-Mar-25 1:55 742,320
pxeboot.com Not versioned 28-Mar-25 1:55 25,254
pxeboot.n12 Not versioned 28-Mar-25 1:55 25,238
hdlscom1.com Not versioned 28-Mar-25 1:55 25,662
hdlscom2.com Not versioned 28-Mar-25 1:55 25,662
hdlscom1.n12 Not versioned 28-Mar-25 1:55 25,646
hdlscom2.n12 Not versioned 28-Mar-25 1:55 25,646
bootmgfw.efi 10.0.25398.1545 28-Mar-25 1:55 2,233,800
bootmgfw_EX.efi 10.0.26100.30169 28-Mar-25 1:55 2,355,984

References

Description of the standard terminology that is used to describe Microsoft software updates

Query words: safeos du