Views
8

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
A total of 1 users have rated this update.

Smooth installs 100%
Minor issues 0%
Major issues 0%

Update Summary

KB5089570 updates Windows 11 version 26H1 to OS Build 28000.2179 with new features, reliability improvements, and security-related driver policy changes. It also adds Secure Boot targeting and policy controls, plus AI component updates. Reference IDs: KB5083806.

Update Details

Security

  • Windows driver policy now removes default trust for cross-signed drivers, allowing only WHCP drivers and trusted legacy drivers.
  • Enhanced batch file and CMD processing adds a more secure mode that prevents batch files from changing during execution.
  • Secure Boot updates add higher-confidence device targeting for new certificates and a policy to limit Secure Boot service data sent to Microsoft.

Bug Fixes

  • File Explorer improves archive format support, preserves view and sort preferences, removes a dark mode flash, and improves explorer.exe reliability.
  • Input reliability is improved for custom wheel tools, Fluid Dictation persistence, emoji panel navigation, and ADLaM typing.
  • Microsoft Store download and install errors are reduced, including 0x80070057, 0x80240008, and 0x80073d28.
  • Windows Hello Face reliability and fingerprint persistence across upgrades are improved.
  • Taskbar system tray loading, Delivery Optimization memory usage, and startup app launch performance are improved.
  • Storage, display color profile persistence, kiosk configuration, and general explorer.exe reliability are improved.

New Features

  • Shared Audio lets two people listen to the same audio from one Windows 11 PC using Bluetooth LE Audio broadcast.
  • Xbox mode adds a streamlined full-screen gaming interface on Windows 11 PCs.
  • File Explorer now supports uu, cpio, xar, and NuGet package archives.
  • Haptic feedback is supported on compatible input devices for actions like snapping windows and aligning objects.
  • Voice typing on the touch keyboard now uses a simpler design without a full-screen overlay.
  • The Arabic 101 Legacy keyboard layout is now available.
  • Drag Tray has been renamed Drop Tray and moved under System > Multitasking.
  • Agents on the taskbar can show progress for supported apps such as Microsoft 365 Copilot Researcher.
  • Enterprise State Roaming can now be managed through Windows Backup for Organizations policies.
  • Policy-based removal of preinstalled Microsoft apps now supports a dynamic app removal list for Enterprise and Education.
  • Printing settings now show an icon for Windows Protected Print Mode support.

Known Issues

  • Microsoft is not currently aware of any issues with this update.

Hints

  • Gradual rollout features may not appear on all devices immediately.
  • The dynamic app removal list is not currently available in Intune Settings Catalog and must be validated with Group Policy or custom OMA-URI.
  • To enable secure batch file processing, set LockBatchFilesWhenInUse under HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor.
  • The Secure Boot service data policy is available under Computer Configuration > Administrative Templates > Windows Components > Secure Boot.
  • If earlier updates are installed, only the new changes in this package are downloaded and installed.

Links

Product Information

Vendor: Microsoft

Product: Windows 11

Version: OS Build 28000.2179

Release date: May 26, 2026