Windows 11 KB5068861 (Nov 2025) — fixes, features, and how to install

KB5068861 is the November 2025 cumulative security update for Windows 11 version 25H2 and 24H2. Once installed, it advances systems to build 26200.7171 (25H2) or 26100.7171 (24H2). Beyond monthly security patches, it rolls up quality fixes from last month’s optional preview and begins a gradual release of several UX updates.

Who gets KB5068861 (builds 26200.7171 / 26100.7171)

• Windows 11 version 25H2 → OS build 26200.7171
• Windows 11 version 24H2 → OS build 26100.7171

The update is cumulative and includes October’s preview changes. Windows Update delivers it automatically; a manual download option is available for offline deployment via the Microsoft Update Catalog.

What KB5068861 fixes (security and quality)

• Gaming handheld power states: resolves devices failing to remain in low‑power states, which led to faster battery drain.
• Gamepad sign‑in delay: fixes a short window where the controller could be unresponsive after sign‑in on some handhelds; the touch keyboard now dismisses as expected once credentials are submitted.
• Storage Spaces and S2D: addresses conditions that could make some Storage Spaces inaccessible or cause Storage Spaces Direct to fail during storage cluster creation.
• Task Manager “X” bug: closing Task Manager now properly terminates the process instead of leaving background instances that degrade performance over time.
• Voice Access setup: corrects first‑run failures when no mic is connected and the voice model hasn’t been installed.
• Desktop selection opening Task View: prevents Task View from appearing unexpectedly when selecting the desktop.
• HTTP.sys request parsing: aligns HTTP/1.1 chunk extension parsing with RFC 9112. A compatibility switch can relax parsing if needed (details below).

Microsoft lists no new known issues for this release.

New Start menu and battery icon changes (gradual rollout)

Two user‑facing updates are rolling out in waves with KB5068861:

• A redesigned Start menu that promotes the full apps list to the primary page and adds new views (Categories, List, and Grid). You can also hide Recommended items; turning this off also removes Recent files in File Explorer and jump lists.
• Updated Taskbar battery indicators with clearer states (charging, energy saver, critically low) and an optional percentage readout. To show the percentage, go to Settings > System > Power & battery and enable Battery percentage.

Because these features use controlled rollout, they may not appear immediately after installing the update.

Networking admins: HTTP.sys strictness toggle

This update tightens the HTTP.sys parser to require the proper CRLF terminator for HTTP/1.1 chunk extensions. If you need to temporarily allow lenient parsing in complex proxy chains or during staged rollouts, set the following registry value and restart the HTTP service or the device:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Http\Parameters]
"HttpAllowLenientChunkExtParsing"=dword:00000001

Set the value to 0 to restore strict parsing.

AI component updates (Copilot+ PCs only)

The package also refreshes AI components that apply only on Copilot+ PCs. Version numbers in this release:

These do not install on non‑Copilot+ Windows PCs or Windows Server.

How to install KB5068861 (automatic and manual)

Automatic (recommended): Open Settings > Windows Update and check for updates. The cumulative update will download and install when available.

Manual (offline): Download the package for your edition and architecture from the Microsoft Update Catalog. You can install it on a running system or service an offline image.

Servicing offline media (Command Prompt as admin):

DISM /Image:C:\MountDir /Add-Package /PackagePath:C:\Packages\Windows11.0-KB5068861-x64.msu

Or in PowerShell:

Add-WindowsPackage -Path "C:\Offline" -PackagePath "C:\Packages\Windows11.0-KB5068861-x64.msu" -PreventPending

On a running PC (Command Prompt as admin):

DISM /Online /Add-Package /PackagePath:C:\Packages\Windows11.0-KB5068861-x64.msu

Or in PowerShell (as admin):

Add-WindowsPackage -Online -PackagePath "C:\Packages\Windows11.0-KB5068861-x64.msu"

If packages are split for your target: install prerequisites in order, then the main LCU. For this release the order is: windows11.0-kb5043080-*.msu → windows11.0-kb5068861-*.msu.

WSUS will sync this update when Products = Windows 11 and Classification = Security Updates are enabled.

Builds and download sizes (Update Catalog)

Sizes vary slightly by language and SKU. Windows Update typically downloads a smaller, differential payload.

Servicing stack, removal, and other servicing notes

• Servicing stack: The update includes the latest servicing stack components for reliable installation. On 24H2 the SSU version referenced is 26100.7010.
• Removal: To remove the LCU from a device that has the combined SSU+LCU, use DISM with the LCU package name. Example: list packages with DISM /Online /Get-Packages, then run DISM /Online /Remove-Package /PackageName:<LCU name>. The SSU is not removable. Using wusa.exe /uninstall on the combined package will not work.
• Update title format: Windows updates now use simplified titles that keep the date, KB number, and build or version while removing redundant technical details.
• December schedule: There will be no optional (non‑security) preview update in December 2025. Monthly security updates continue on schedule; regular preview releases resume in January 2026.
• Store apps: Windows Update does not deliver Microsoft Store app updates. Manage those through Microsoft Store or your enterprise app management solution.

Security posture and Secure Boot planning

KB5068861 includes the month’s Windows security fixes. Separately, Secure Boot certificates used by most Windows devices begin expiring in June 2026. Plan certificate updates in advance to avoid boot disruptions, especially for managed fleets with custom imaging or locked‑down firmware policies.

If you don’t see the redesigned Start menu or the updated battery icon immediately after applying KB5068861, that’s expected—the rollout is staged. The Task Manager close behavior fix, Storage Spaces reliability improvements, and networking parser change take effect as soon as the update is installed.