KB5071959: Windows 10 Version 22H2 Out-of-Band Update (OS Build 19045.6466)
Out-of-band update for Windows 10 version 22H2 (OS Build 19045.6466), released November 11, 2025, fixing ESU enrollment wizard failures on consumer devices.
Summary
This is an out-of-band (OOB) security update for Windows 10, version 22H2, released on November 11, 2025, producing OS Build 19045.6466. It targets consumer devices not yet enrolled in the Extended Security Updates (ESU) program and is cumulative, incorporating fixes from the October 14, 2025 security update (KB5066791). Source: Microsoft Support.
Improvements and fixes
- Resolves an issue in the Windows 10 Consumer ESU enrollment process where the enrollment wizard could fail during enrollment. After installing this update, consumer devices should be able to complete ESU enrollment successfully using the wizard.
- Includes cumulative security fixes and improvements carried forward from the October 14, 2025 security update (KB5066791).
- Bundles the latest servicing stack update (SSU KB5071982, version 19045.6465), which improves the reliability of the Windows update installation process.
Known issues
Microsoft lists no known issues for this update at the time of writing.
How to get this update
Prerequisite: Before installing, ensure the latest servicing stack update (SSU) is already present on the device. Skipping this step may result in the cumulative update not being offered until the SSU is in place. This update bundles the SSU (KB5071982 - version 19045.6465), so applying KB5071959 also addresses the servicing stack requirement.
Installation steps:
- Open Windows Update settings and select Check for updates.
- Install the out-of-band update (KB5071959) and restart the device to complete the installation.
After the device restarts, use the Windows 10 Consumer ESU enrollment wizard to enroll. Once enrollment is confirmed, the device will receive Extended Security Updates through Windows Update going forward.
Note on Microsoft Store apps: This Windows update does not install Microsoft Store application updates. Enterprise users should refer to Microsoft Store apps guidance in Configuration Manager; consumer users should use the Get updates option inside the Microsoft Store app.
Frequently asked questions
Why is this update classified as a security update if it is out-of-band?
Microsoft marked KB5071959 as a security update because the ESU enrollment wizard failure it resolves was preventing affected consumer devices from receiving essential security updates. Fixing the enrollment path restores the device's ability to obtain ongoing security coverage, making the fix security-relevant even though the update is delivered outside the normal Patch Tuesday cycle.
Do I need to do anything after installing KB5071959 to keep receiving updates?
Yes. Installing KB5071959 alone does not automatically enroll the device in the Windows 10 Consumer ESU program. After the update installs and the device restarts, you must complete enrollment through the Windows 10 Consumer ESU enrollment wizard. Once enrollment succeeds, Extended Security Updates will arrive through Windows Update automatically.
What is the Secure Boot certificate situation I should be aware of?
Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been pushing updated certificates to consumer and non-managed business devices over recent months. Devices that have not yet received the newer certificates will still start and operate normally, and standard Windows updates will continue to install. Microsoft will keep distributing the newer certificates via Windows Update in coming months. IT administrators should consult the Secure Boot Playbook for Windows clients and Windows Server for managed-environment guidance.
What does the bundled servicing stack update (KB5071982) do?
KB5071982 updates the servicing stack - the component responsible for installing Windows updates - to version 19045.6465. The servicing stack update improves the reliability and resilience of the update installation process itself, reducing the chance of problems when future updates are applied. Microsoft now ships the latest SSU combined with the cumulative update rather than as a separate download.
