KB5065789: Windows 11 versions 24H2 and 25H2 Preview Update (September 29, 2025)

Summary

This is an optional, non-security preview update for Windows 11 versions 24H2 and 25H2, as documented by Microsoft Support. It released on September 29, 2025, bringing OS builds to 26200.6725 and 26100.6725. All improvements and fixes apply equally to both versions, providing a consistent experience across devices.

Highlights

• [Click to Do] New and popular action tags in the Click to Do context menu help users discover the latest AI-powered actions. The Summarize action now produces shorter, more focused output for text entities.
• [Agents in Settings] A direct navigation link to the corresponding settings page is now available from agent search results on Copilot+ PCs.
• [Desktop] Hardware indicators for brightness, volume, airplane mode, and virtual desktops can now be repositioned on screen via Settings > System > Notifications.
• [Taskbar] IT administrators no longer need to restart explorer.exe to apply the pinning policy; the pin appears within approximately 8 hours after the policy is applied.
• [File Explorer] AI actions are now available by right-clicking files, including Visual Search, Blur Background, Erase Objects, and Remove Background for images, plus a Summarize action for documents in OneDrive and SharePoint (requires Microsoft 365 subscription and Copilot license). Note: AI actions are not yet available in the EEA.
• [File Explorer] The context menu no longer shows an accent-colored backplate behind packaged app icons in the Open With list. Performance improvements have been made for loading cloud files and context menus. Fixed overlapping icons and text with increased text scaling. Fixed mirroring of icons in details, preview, and navigation panes for Arabic and Hebrew display languages.
• [Windows Share] Users can now pin favorite apps in the Windows share window.
• [Advanced Settings] The redesigned Advanced settings page (Settings > System > Advanced) replaces the For Developers page and adds Git details - branch, diff count, and last commit message - directly in File Explorer for repository folders.
• [Input] New keyboard shortcuts: Windows logo key + Minus (-) inserts an en dash, and Windows logo key + Shift + Minus (-) inserts an em dash. Fixed an issue where touch input might not work on the sign-in screen after waking from sleep.
• [Narrator] Braille Viewer is now included, showing on-screen text and its Braille equivalent in a floating window. Narrator also offers improved feedback in Word for footnotes, comments, lists, and tables.
• [Passkeys] Plugin passkey manager integration is now available in Windows 11 via Settings > Accounts > Passkeys > Advanced options. Added support for setting up a PIN for security keys when Relying Parties set User Verification = Preferred during authentication.
• [Settings] Bing search history management has moved to the Privacy dashboard. Additional time, language, and keyboard settings have migrated from Control Panel to Settings. Performance improvements made to the apps list in Settings > Apps > Installed apps. Fixed a false BitLocker link appearing in Settings > System > Storage > Disks and Volumes that caused error 0x80004005.
• [Gaming] On supported handheld devices, short-pressing the Xbox button opens Game Bar; long-pressing now opens Task View. Performance improvements made for gaming with Game Bar or overlays active, particularly on multi-monitor setups with different refresh rates.
• [Other] A modernized dialog interface now aligns with Windows 11 visuals, including the dialog shown when an app fails to open.
• [Voice access] Natural language commanding is now available for Intel and AMD-powered Copilot+ PCs. Fixed an issue where Voice access could get stuck reporting it was listening without responding.
• [Notification Center] Notification Center is now available on secondary monitors; open it by selecting the date and time in the system tray.
• [Command line] Windows now includes Edit, a command-line text editor. Type edit followed by a file name in Terminal to use it. Edit is open source and available on GitHub.
• [Dynamic Lighting] Fixed an issue where the Dynamic Lighting Background Controller could occasionally consume excessive CPU after unlocking the PC.
• [High Dynamic Range (HDR)] Fixed an issue where HDR could turn off immediately after being enabled in Settings.
• [Media] Fixed playback of protected content in certain Blu-ray, DVD, and digital TV apps using Enhanced Video Renderer with HDCP enforcement, which could occur after installing KB5064081.
• [Performance] Added support for Certificate Revocation List (CRL) partitioning in Windows Certificate Authorities.
• [Quick Settings] Fixed an issue where pressing Enter would not confirm a PIN when casting from Quick Settings.
• [Windows Hello] Fixed an unexpected message stating "Something happened and your PIN isn't available" when entering safe mode.
• [Windows Sandbox] Fixed an issue where the VmmemCMFirstBoot process could consume large amounts of CPU after sign-in when Windows Sandbox is enabled, causing the PC to become unresponsive.
• [MSHTA inline scripts] Inline scripts passed directly to MSHTA.exe will no longer run and will fail silently with no error code. This is an intentional security hardening change. Execution of .hta files containing script within their HTML continues to work. Apps relying on inline scripts must move to supported alternatives such as invoking an .hta file or loading script from an external file.

Improvements and fixes

• [Hyper-V] Fixed an issue where assigning a GPU paravirtualization device to a virtual machine could cause the session to freeze and stop responding.

Known issues

Microsoft lists no known issues for this update at the time of writing.

How to get this update

This update is available through the following channels:

• Windows Update / Windows Update for Business: Go to Settings > Windows Update and select Check for updates. Because this is a preview update, it must be manually requested - select the option to download and install optional updates.
• Windows Server Update Services (WSUS): Administrators can deploy this update to managed devices through WSUS.
• Microsoft Update Catalog: The update can be downloaded directly from the Microsoft Update Catalog. Note: As of May 26, 2026, the second MSU file listed under Catalog in Method 2 was updated.

Microsoft notes that this update applies to devices running Windows 11 versions 24H2 and 25H2, and that all improvements and fixes apply consistently to both versions.

Frequently asked questions

Does this update apply to both Windows 11 version 24H2 and 25H2?

Yes. Microsoft confirms that all improvements and fixes in KB5065789 apply to both Windows 11 version 24H2 and version 25H2, providing a consistent experience across devices running either version. Both versions receive the same OS build number, 26200.6725 or 26100.6725.

Why are MSHTA inline scripts now blocked?

Microsoft identified inline script execution passed directly to MSHTA.exe as a security vulnerability. As part of a planned security hardening change, those scripts now fail silently with no error code. Standard .hta files containing script in their HTML continue to work. Affected applications must migrate to supported alternatives such as invoking an .hta file directly or loading script from an external file.

What is the Secure Boot certificate expiration notice about?

Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been distributing updated certificates to consumer and non-managed business devices. Devices that have not yet received the new certificates will continue to start and operate normally, and standard Windows updates will continue to install. IT administrators should follow the Secure Boot Playbook for Windows clients and Windows Server.

Are all highlighted features available immediately after installing the update?

Not necessarily. Several features listed as highlights are on a gradual rollout, meaning they are distributed over a period of time rather than all at once. This includes Click to Do improvements and Agents in Settings on Copilot+ PCs. Some features, such as Administrator Protection Preview, were noted as rolling out at a future date rather than with this release.