KB5053598: Windows 11 Version 24H2 Security Update (OS Build 26100.3476) - March 2025
March 11, 2025 security update for Windows 11 version 24H2, delivering OS build 26100.3476 with miscellaneous security improvements and a bundled servicing stack update.
Summary
This is the March 11, 2025 monthly security update for Windows 11 version 24H2, releasing as OS Build 26100.3476 (KB5053598). It is a security-classification cumulative update that addresses internal OS security issues and bundles the servicing stack update KB5052915 (build 26100.3321). Source: Microsoft Support.
Highlights
- This update addresses security issues for the Windows operating system.
Improvements and fixes
- Includes all quality improvements previously delivered in KB5052093, which released on February 25, 2025.
- Applies miscellaneous security improvements to internal OS functionality. No additional specific issues were documented for this release beyond what is noted above.
- Bundles the Windows 11 servicing stack update KB5052915 (build 26100.3321), which improves the reliability of the component responsible for installing Windows updates.
Known issues
Roblox unavailable on Arm devices
Symptom: Players on Arm-based devices are unable to download and play Roblox from the Microsoft Store on Windows.
Workaround: Roblox is working on a resolution. Until one is available, players on Arm devices can play Roblox by downloading the title directly from www.Roblox.com. Check the Roblox support site for updates on the fix.
Citrix Session Recording Agent blocks update installation
Symptom: Devices with Citrix Session Recording Agent (SRA) version 2411 (released December 2024) may be unable to complete installation of the January 2025 Windows security update. The update may initially download and apply correctly, but on restart an error similar to "Something didn't go as planned. No need to worry - undoing changes" appears and the device reverts to its previous update state. This issue is expected to affect a limited number of organizations. Home users are not expected to be affected.
Workaround: This issue has been resolved in Citrix Session Recording Agent version 2503, released on April 28, 2025, and newer versions. See the Citrix documentation titled "Microsoft's January Security Update Fails/Reverts on a machine with 2411 Session Recording Agent" for details.
Microsoft Copilot app uninstalled from some devices
Symptom: The Microsoft Copilot app is unintentionally uninstalled and unpinned from the taskbar on some devices. This issue does not affect the Microsoft 365 Copilot app.
Workaround: This issue has been fixed and affected devices are being returned to their original state. Users can also reinstall the app from the Microsoft Store and pin it to the taskbar manually.
Unexpected Remote Desktop Protocol disconnections
Symptom: After installing the January 2025 Windows preview update (KB5050094) and later updates - including this March 2025 update - users may experience unexpected disconnections from Remote Desktop Protocol (RDP) sessions, including Remote Desktop Services (RDS). RDP sessions may disconnect after approximately 65 seconds when establishing UDP-based connections from Windows 11 version 24H2 devices to RDS deployments running Windows Server 2016 or earlier. Note that Windows Server 2025 itself is not affected as an RDS host but may experience disconnects when acting as an RDP client connecting to older servers.
Workaround: This issue is addressed in KB5053656. IT admins on enterprise-managed devices who have installed the update released March 27, 2025 (KB5053656) or later do not need a Known Issue Rollback (KIR) or special Group Policy. For devices running an update released before March 27, 2025, IT admins can deploy a special Group Policy found under Computer Configuration > Administrative Templates. The applicable Group Policy download is "Windows 11 24H2 and Windows Server 2025 KB5053598 250314_20401 Known Issue Rollback." A device restart is required to apply the Group Policy setting. For deployment guidance, see "How to use Group Policy to deploy a Known Issue Rollback."
How to get this update
Microsoft combines the latest servicing stack update (SSU) with the latest cumulative update (LCU) in a single package, so no separate SSU installation is required before applying this update.
- Windows Update / Microsoft Update: The update downloads and installs automatically.
- Windows Update for Business: The update downloads and installs automatically in accordance with configured policies.
- Microsoft Update Catalog: Download the standalone package directly from the Microsoft Update Catalog. This KB contains more than one MSU file. You can install all MSU files together using DISM with the
/Add-Packageswitch pointed at the folder containing all files, or install each MSU file individually in the following order: firstwindows11.0-kb5043080-x64, thenwindows11.0-kb5053598-x64. - Windows Server Update Services (WSUS): The update syncs automatically when Products and Classifications are configured as Product: Windows 11, Classification: Security Updates.
To remove only the LCU after installation, use the DISM /Remove-Package command with the LCU package name as the argument. Running wusa.exe /uninstall against the combined package will not work because the SSU is included and cannot be removed after installation.
Frequently asked questions
Does this update include previously released fixes?
Yes. KB5053598 includes all improvements that shipped in KB5052093, released on February 25, 2025. If your device already has earlier updates installed, only the new content in this package will be downloaded and applied, reducing the size of the download.
Is the servicing stack update included, or does it need to be installed separately?
The servicing stack update KB5052915 (build 26100.3321) is bundled directly into this cumulative update package. You do not need to locate or apply it as a separate prerequisite before installing KB5053598.
How should enterprise admins handle the RDP disconnection issue?
If devices are running KB5053656 (released March 27, 2025) or a later update, no additional action is needed. For devices still on an earlier update, IT admins should deploy the specific Known Issue Rollback Group Policy for Windows 11 version 24H2 and restart affected devices. Full guidance is available in the "How to use Group Policy to deploy a Known Issue Rollback" documentation.
Will this update also install Microsoft Store app updates?
No. Windows updates do not install Microsoft Store application updates. Enterprise users should refer to Microsoft Store apps - Configuration Manager for app update management. Consumer users should use the Get updates for apps and games in Microsoft Store option directly within the Store.
