KB5065789 is an optional, non-security “C” release for Windows 11 that advances version 24H2 to build 26100.6725 and version 25H2 to build 26200.6725. It delivers a long list of quality fixes alongside new convenience features, many of which are rolling out gradually. If you skip this preview, the same changes arrive in the next mandatory monthly update.

What’s new in KB5065789 (gradual rollout)

Feature Change type Details Availability
Click to Do (Copilot+ PCs) New Context menu tags for popular AI actions; shorter, more focused summaries. Rolling out
Agents in Settings (Copilot+ PCs) New Direct link from agent search results to the relevant Settings page. Rolling out
Desktop indicators New Move on-screen hardware pop-ups (brightness, volume, airplane mode, virtual desktops) via Settings > System > Notifications. Rolling out
Taskbar (IT) New Pinning policy applies without restarting explorer.exe; users should see pins within ~8 hours based on refresh. Rolling out
File Explorer — AI actions New Right-click images (.jpg/.jpeg/.png) to launch Visual Search, Blur Background (Photos), Erase Objects (Photos), Remove Background (Paint). Summarize files through Microsoft 365 Copilot for OneDrive/SharePoint with the required subscription and license. Not available in the EEA. Rolling out
File Explorer — UI/perf Improved Removed accent backplates behind packaged app icons in Open with; faster context menus and cloud file launch; fixes for overlapped desktop text when text scaling is increased; correct mirroring for Arabic/Hebrew in details/preview/navigation panes. Rolling out
Windows Share New Pin favorite apps in the Windows share window for quicker access. Rolling out
Advanced settings New Redesigned Settings > System > Advanced replaces “For developers”. Adds File Explorer + version control details (branch, diff count, last commit) when selecting a repo folder. Rolling out
Input New / Fixed Insert en dash with Win + -, em dash with Win + Shift + - (Magnifier still uses Win + - to zoom out). Fixes touch input not working for PIN after sleep. Rolling out
Narrator New / Improved Braille Viewer (Win + Ctrl + Enter, then Narrator key + Alt + B) shows on-screen and Braille equivalents; smoother reading and navigation in Word with clearer list/table/selection feedback. Rolling out
Administrator protection (preview) New Protects free-floating admin rights using just-in-time elevation. Off by default; enable via OMA-URI in Intune or Group Policy. Rolling out
Passkeys New Plugin credential manager integration for passkeys. Configure under Settings > Accounts > Passkeys > Advanced options with Windows Hello verification. Rolling out
Settings New / Improved / Fixed Bing search history link removed from Settings; manage from the Privacy dashboard. More time/language/keyboard options moved from Control Panel into Settings. Faster loading of Installed apps. Fix for Disks & Volumes showing BitLocker link in unsupported cases (0x80004005). Rolling out
Gaming New / Improved Short press Xbox button opens Game Bar; long press opens Task View; press-and-hold still powers off controller. Performance improvements with overlays like Game Bar, especially on multi-monitor setups with different refresh rates. Rolling out
System dialogs New Modernized visuals across several dialogs, including the one shown when an app fails to open. Rolling out
Voice access New / Fixed Natural language commanding (Intel/AMD Copilot+ PCs). Fix for a stuck “listening” state. Rolling out
Dynamic Lighting Fixed Background Controller could consume excessive CPU after unlocking. Rolling out
HDR Fixed HDR could immediately disable after being turned on in Settings. Rolling out
Media (known issue) Fixed (partial) Protected content playback issues in some Blu‑ray/DVD/Digital TV apps using Enhanced Video Renderer with HDCP enforcement addressed; some DRM digital audio apps may still be affected. Rolling out
Certificate services Improved Added support for CRL partitioning in Windows Certificate Authorities. Rolling out
Quick Settings Fixed Pressing Enter now confirms the PIN when casting if a PIN is required. Rolling out
Windows Hello Fixed Resolved “Something happened and your PIN isn’t available” when entering Safe Mode. Rolling out
Windows Sandbox Fixed High CPU from VmmemCMFirstBoot after sign-in that could make the PC unresponsive. Rolling out

Note: Many of these features are controlled by staged rollouts. Don’t be surprised if they appear days or weeks after installing the update.

Quality fixes available to everyone (normal rollout)

  • Hyper‑V: Fixes startup of VMs with TPM on ARM64 devices, and a freeze when assigning a GPU paravirtualization device to a VM.
  • Input and text rendering: Corrects display of some characters with the Chinese IME and fixes boxes/garbled symbols for certain extended Unicode characters (including CJK Extension B–F) in tooltips and text fields with character limits.
  • Networking: Restores access to SMBv1 shares using NetBIOS over TCP/IP (NetBT) after issues introduced by a prior update.
  • Servicing: Resolves Windows Update disruptions for environments using Windows Server Update Services (WSUS).
  • Windows Hello (Entra ID): Fixes 0x80090010 errors during PIN setup after recent updates.

AI components updated (Copilot+ PCs)

Component Version
Image Search 1.2509.1022.0
Content Extraction 1.2509.1022.0
Semantic Analysis 1.2509.1022.0
Settings Model 1.2509.1022.0

These AI updates are included in the cumulative package, but they only apply on Copilot+ PCs. They won’t install on standard Windows PCs or Windows Server.

Known issue: protected media playback in some legacy apps

Some Digital TV and Blu‑ray/DVD applications that rely on Enhanced Video Renderer with HDCP enforcement or DRM for digital audio may fail to play protected content, show black screens, or stuttered playback. Streaming services are unaffected. This update partially addresses issues for apps using Enhanced Video Renderer with HDCP; apps using DRM for digital audio can still be impacted. A longer‑term solution is under investigation.

How to install KB5065789

KB5065789 is optional. On a consumer PC, go to Settings > Windows Update, select Check for updates, and choose the optional update when it appears.

For offline or managed deployment, download the standalone package from the Microsoft Update Catalog and install with DISM. Use the x64 or ARM64 MSU matching your device:

Download: Microsoft Update Catalog (KB5065789)

You can install the primary MSU directly:

DISM /Online /Add-Package /PackagePath:"C:\Packages\Windows11.0-KB5065789-x64.msu"

Or with PowerShell:

Add-WindowsPackage -Online -PackagePath "C:\Packages\Windows11.0-KB5065789-x64.msu"

If you install individual prerequisite packages manually, install them in order. When required, install the dependency MSU before the KB5065789 MSU:

windows11.0-kb5043080-x64_*.msu
windows11.0-kb5065789-x64_*.msu

Tip: When adding the update to offline media, mount the image and use DISM /Image:<mountdir> /Add-Package /PackagePath:<MSU>. Use the most recent Dynamic Update packages that match the same month when updating installation media.

Servicing stack and uninstall notes

  • Servicing Stack Update: KB5067437 (version 26100.6717) is bundled to improve the reliability of update installation.
  • Uninstalling the LCU: To remove the latest cumulative update after installation, use DISM with the LCU package name (retrieve with DISM /Online /Get-Packages). The combined SSU cannot be removed, and running wusa.exe /uninstall on the combined package will not work.

Heads‑up: Secure Boot certificates expire starting June 2026

Secure Boot certificates used by most Windows devices begin expiring in June 2026. Out‑of‑date certificates can prevent affected devices from booting securely. Review the official guidance and update plans now to avoid disruption: Windows Secure Boot certificate expiration and CA updates.

If you’re on 24H2 or 25H2 and you want the new context menu AI tools, the repositionable hardware indicators, and the gaming and Windows Hello fixes right away, this preview is worth a look—just keep in mind that some features are controlled by phased rollouts and may take time to appear.