KB5077797 Out-of-Band Update for Windows 11 23H2 (OS Build 22631.6494)
Out-of-band cumulative update for Windows 11 version 23H2, released January 17, 2026, fixing Remote Desktop sign-in failures and power/hibernate restart issues.
Summary
This is an out-of-band (OOB) cumulative update for Windows 11 version 23H2, released on January 17, 2026, producing OS Build 22631.6494. It carries all fixes from the January 13, 2026 security update (KB5073455) and adds targeted repairs for two regressions that update introduced. Source: Microsoft Support.
Improvements and fixes
- Remote Desktop sign-in fix: Some users encountered authentication failures when connecting through Remote Desktop applications on Windows, including the Windows App. This update resolves those sign-in failures.
- Power and battery fix: On devices with Secure Launch enabled, attempting to shut down or hibernate caused the device to restart instead. This update corrects that behavior so shutdown and hibernation work as expected.
- Cumulative baseline: All security fixes and quality improvements from the January 13, 2026 security update (KB5073455) are included, so devices that skipped that update receive full coverage.
- Servicing stack update included: The package bundles servicing stack update KB5071963 (version 22621.6265), which improves the reliability of the component responsible for installing future Windows updates. Note that the servicing stack cannot be removed from the system once installed.
- AI component handling: The update package includes updates for AI components, but those components apply only to Windows Copilot+ PCs and will not install on standard Windows PCs or Windows Server devices.
Known issues
Apps might become unresponsive when saving files to cloud-based storage
Symptom: After installing this update, some applications may become unresponsive or encounter unexpected errors when opening or saving files to cloud-based storage providers such as OneDrive or Dropbox. In certain Outlook configurations that store PST files on OneDrive, Outlook may hang and fail to reopen unless the process is terminated or the system is restarted. Users may also see missing sent items or previously downloaded emails being re-downloaded.
Workaround: This issue is addressed in KB5078132.
Some devices with Virtual Secure Mode enabled might fail to shut down or hibernate
Symptom: After installing this update, some Secure Launch-capable PCs with Virtual Secure Mode (VSM) enabled are unable to shut down or enter hibernation. Instead, the device restarts.
Workaround: This issue is fully resolved in Windows updates released on February 10, 2026 (KB5075941), and in all updates released after that date. The fix covers both devices that use Secure Launch and devices with Virtual Secure Mode (VSM) enabled. An earlier partial fix for some Secure Launch devices was first released through the Microsoft Update Catalog on January 17, 2026 (KB5077797), and later through Windows Update on January 24, 2026 (KB5078132).
How to get this update
Microsoft now combines the latest servicing stack update (SSU) with the latest cumulative update (LCU) in a single package, so no separate SSU installation step is required beforehand.
- Windows Update and Windows Update for Business: The update does not appear to be available directly through these channels based on the table; see the Catalog option.
- Microsoft Update Catalog: The standalone package is available from the Microsoft Update Catalog. This is the primary delivery path for this OOB update.
- Windows Server Update Services (WSUS): Also directed to the Catalog option per the release table.
To remove only the LCU portion after installation, use the DISM /online /remove-package command with the LCU package name as the argument. You can retrieve the package name by running DISM /online /get-packages. Running wusa.exe with the /uninstall switch will not work on the combined SSU+LCU package because the servicing stack component cannot be removed once installed.
File information for the cumulative update (KB5077797) and the bundled servicing stack update (KB5071963, version 22621.6265) can be downloaded separately from Microsoft Support.
Frequently asked questions
Why was this update released out-of-band rather than on Patch Tuesday?
Microsoft issues out-of-band updates when a previously released update introduces regressions significant enough to warrant an immediate fix outside the normal monthly cadence. KB5077797 targets two specific regressions from KB5073455 - Remote Desktop sign-in failures and incorrect restart behavior on Secure Launch devices - that could not wait until the next scheduled release.
Do I need to install KB5073455 first before applying this update?
No. KB5077797 is a cumulative update that already includes all content from KB5073455 and earlier releases. Devices that skipped the January 13 security update will receive that content automatically when this OOB update is applied.
Is the servicing stack update in this package mandatory, and can I remove it later?
The servicing stack update (KB5071963) is bundled inside the combined package and installs automatically. Once installed, the SSU portion cannot be removed. Only the LCU portion can be removed using DISM command-line tools; using wusa.exe with the /uninstall switch on the combined package will not work.
Should I deploy this update if my environment is not affected by either listed regression?
Yes. Because this is a cumulative update, it also carries the full security baseline from the January 2026 update cycle. Organizations not experiencing Remote Desktop or power-management issues still benefit from remaining current on security fixes, and the update prepares devices for smooth installation of future releases.
