KB5067036: Windows 11 Preview Update - OS Builds 26200.7019 and 26100.7019 (October 28, 2025)

Summary

This optional non-security preview update (Microsoft Support) applies to Windows 11 versions 25H2 and 24H2, producing OS builds 26200.7019 and 26100.7019. Released on October 28, 2025, it delivers functionality, performance, and reliability improvements across both Copilot+ PC experiences and standard Windows 11 PC features.

Highlights

• A redesigned Start menu with a scrollable All section, category and grid views, a responsive layout that adapts to screen size, and Phone Link integration for connected Android and iOS devices.
• Several new Click to Do capabilities on Copilot+ PCs, including a Copilot prompt box, on-screen text translation, unit conversion tooltips, a two-finger touch gesture, freeform and rectangle selection modes, and Microsoft 365 Live Persona Cards.
• Fluid Dictation in Voice Access on Copilot+ PCs, providing real-time grammar and punctuation correction powered by on-device small language models, plus new Japanese language support.
• API support for NIST post-quantum cryptography algorithms ML-KEM and ML-DSA (FIPS 203 and FIPS 204) via Cryptography: Next Generation (CNG) and .NET.
• Updated battery icons on the taskbar and lock screen with color indicators (green, yellow, red) and battery percentage display.
• A fix for unexpected User Account Control (UAC) prompts affecting some apps, including Autodesk AutoCAD, caused by MSI repair operations after the August 2025 security update.
• Underlying driver changes aimed at reducing driver installation failures with error 0x80070103.

Improvements and fixes

Copilot+ PC - Click to Do

• A new prompt box in Click to Do lets users type custom prompts and send them along with selected on-screen content to Copilot; suggested prompts powered by Phi-Silica appear below the box for text in English, Spanish, and French (not available in the European Economic Area or China).
• Users can now translate on-screen text via Microsoft Copilot when the selected text is in a language different from the Windows display or preferred language setting (not available in the European Economic Area or China).
• Click to Do can now convert units such as length, area, volume, height, temperature, and speed; hovering over a number-and-unit pair shows a floating tooltip with the conversion (not available in the European Economic Area or China).
• Pressing and holding two fingers anywhere on a Copilot+ PC touchscreen now opens Click to Do, simultaneously selecting the item under the fingers and displaying relevant actions.
• Freeform Selection, Rectangle Selection, and Ctrl+click are now available in Click to Do for selecting multiple types of on-screen items.
• Live Persona Cards from Microsoft 365 now appear in Click to Do when pressing Windows key + clicking an organizational email address.
• Visual cues now highlight key items such as emails and tables as Click to Do opens.
• Fixed: Click to Do could unexpectedly invoke when pressing Windows key + P.

Copilot+ PC - Voice Access

• Fluid Dictation is now available in Voice Access, offering real-time correction of grammar, punctuation, and filler words using on-device small language models; it is on by default and available in all English locales on Copilot+ PCs.
• Users can now configure a delay before a voice command executes via Voice Access settings.
• Voice Access now supports Japanese for navigation, dictation, and interaction with Windows.
• Fixed: Voice Access could unexpectedly stop working with error code 9001.

Copilot+ PC - Other

• File Explorer Home now shows quick-action commands such as Open file location and Ask Copilot when hovering over a file (requires Microsoft account sign-in; not available in the European Economic Area).
• The Agent in Settings experience now supports French.
• Improved Windows Search, available through controlled feature rollout, is now available on all Copilot+ PCs.

Windows 11 PC - Start menu

• The Start menu has been redesigned with a scrollable All section, category view, grid view, a responsive layout for different screen sizes, and a mobile device button for Phone Link integration with Android and iOS (rolling out to the European Economic Area in 2025).

Windows 11 PC - Input

• A new system tray icon for the emoji and more panel is rolling out to more users; users can configure it to show Always, While Typing, or Never under Settings > Personalization > Taskbar.

Windows 11 PC - Lock screen and Taskbar

• New battery icons with color indicators (green for charging and good condition, yellow for battery saver at 20% or below, red for critically low) now appear in the system tray, Quick Settings, Settings, and the lock screen lower-right corner.
• Fixed: Hovering over a taskbar app icon and then selecting the window preview could cause the preview to dismiss without bringing the window to the foreground.

Windows 11 PC - Post-Quantum Cryptography

• API support added for NIST post-quantum cryptography algorithms ML-KEM and ML-DSA (FIPS 203 and FIPS 204) via CNG and .NET, enabling key exchange, signing, and decryption.

Windows 11 PC - Display and Graphics

• Fixed: Apps and browsers could display partially unresponsive on-screen content when other maximized or full-screen apps updated in the background, particularly noticeable when scrolling.
• Fixed: After installing KB5064081, some videos and games could appear unexpectedly red.
• Fixed: When the Connected Devices Platform Service was disabled, opening Settings > System > Display could cause Settings to stop responding or close unexpectedly.

Windows 11 PC - Settings

• The "Email & accounts" section has been renamed "Your accounts" under Settings > Accounts.

Windows 11 PC - Microsoft 365 Copilot

• A new Microsoft 365 Copilot page has been added to the Get Started experience for commercial devices with an active Microsoft 365 subscription.

App compatibility

• Fixed: Unexpected UAC prompts were generated for some apps, including Autodesk AutoCAD, during MSI repair operations after the August 2025 Windows security update.

Drivers

• Underlying changes were made to help reduce instances of drivers failing to install with error 0x80070103.

Simplified update titles

• Windows update titles now use a standardized format that removes unnecessary technical elements such as platform architecture and date prefixes, while retaining the KB number and build or version information.

Secure Boot certificate expiration notice

• Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been deploying updated certificates to consumer and non-managed business devices. Devices that have not yet received the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install. IT administrators should follow the Secure Boot Playbook for Windows clients and Windows Server.

Known issues

Microsoft lists no known issues for this update at the time of writing.

How to get this update

This update is delivered in two phases: a gradual rollout that reaches devices over time and a normal rollout that releases broadly to all eligible devices. Because features are deployed incrementally, not all devices will receive every feature simultaneously.

• Windows Update / Windows Update for Business: Go to Settings > Windows Update and select Check for updates. This is an optional preview update; users must manually select Download and install.
• Windows Server Update Services (WSUS): The update will sync to WSUS for managed environments.
• Microsoft Update Catalog: Search for KB5067036 to download the standalone package. Note that as of May 26, 2026, the second MSU file listed under Catalog in Method 2 was updated.

No specific prerequisite servicing stack update is mentioned on this page for Windows 11 versions 24H2 and 25H2.

Frequently asked questions

Is KB5067036 a security update?

No. KB5067036 is an optional non-security preview update. It focuses on functionality, performance, and reliability improvements rather than security patches. Security updates for Windows 11 are released on the standard monthly Patch Tuesday schedule. Organizations that defer optional updates will not receive this content until it is folded into a future cumulative update.

Will all devices receive every new feature listed in this update immediately?

Not necessarily. Several features in this update are deployed through a gradual or controlled feature rollout (CFR), meaning they reach devices in phases rather than all at once. Additionally, some Copilot+ PC features are restricted by region - for example, certain Click to Do and File Explorer features are not available in the European Economic Area or China.

How does the post-quantum cryptography addition affect enterprise environments?

This update adds API support for ML-KEM and ML-DSA algorithms (FIPS 203 and FIPS 204) via CNG and .NET. Enterprises that require FIPS-compliant cryptography for key exchange, signing, and decryption can begin evaluating these APIs. No automatic enforcement of PQC is implied by this update; it extends the available cryptographic options for developers and administrators to adopt.

What should IT admins do about the Secure Boot certificate expiration?

Admins should review the Secure Boot Playbook for Windows clients and Windows Server, as the certificates used by most Windows devices begin expiring in June 2026. Microsoft states that devices without the updated certificates will continue to start normally and receive standard Windows updates. Admins can check device status in the Windows Security app and should ensure managed devices receive the updated certificates via Windows updates in the coming months.