Windows Update

Winsage
May 31, 2026
Microsoft is set to introduce a feature for Windows 11 called Cloud-Initiated Driver Recovery (CIDR), which will automatically revert problematic driver updates to stable versions via Windows Update. This feature aims to improve user experience by eliminating the need for manual uninstallation of faulty drivers. CIDR will monitor drivers and, if a driver is found to be problematic, it can initiate a remote rollback to restore a stable version. The process will not require additional software installations or changes to existing workflows for hardware manufacturers. The automated rollback will specifically target only the affected hardware components, ensuring other drivers and system functions remain unaffected. Initial testing for CIDR is scheduled between May and August 2026, with a broader rollout expected in September 2026.
Winsage
May 31, 2026
Microsoft is enhancing Windows 11 by focusing on performance improvements and user experience. The initiative began in late January when Pavan Davuluri acknowledged user pain points. Key updates have included modifications to the Insider Program, enhancements to Windows Update in April, Taskbar updates in May, and changes to the Start menu. Recent improvements highlighted by Marcus Ash include enhancements to the Taskbar and Start menu, driver improvements, updates to Cloud Initiated Driver Recovery, increased reliability of File Explorer, and accessibility updates. Microsoft plans to unveil further initiatives at the upcoming Microsoft Build event and has launched a podcast discussing these changes.
Tech Optimizer
May 30, 2026
Antivirus applications are essential for protecting Windows systems from online threats like viruses, malware, and phishing attempts. Many users prefer dedicated antivirus software despite improvements in built-in security features. Free antivirus software offers crucial protection without a paid subscription, balancing security, performance, and user-friendliness. Key free antivirus options include: - Microsoft Defender Antivirus: Built-in, real-time scanning, and regular updates. - Bitdefender Antivirus Free for Windows: Strong malware detection with minimal system impact. - AVG AntiVirus Free: Provides real-time protection and phishing defense. - Avast One Basic: Combines antivirus with additional security tools. - Avira Free Security: Lightweight with antivirus and privacy tools. - Panda Antivirus: User-friendly with essential protection and malware cleanup tools. Effective antivirus solutions should offer real-time protection, automatic updates, and seamless operation without hindering system performance. Trust and usability are also important factors in choosing antivirus software. The best antivirus for a user depends on their daily activities, with basic apps suitable for light users and more advanced options for those who frequently download files. Free antivirus applications can provide adequate protection for most users, but they may lack advanced features found in paid versions. Microsoft Defender and Bitdefender are noted for their low system impact. Running multiple antivirus programs simultaneously is not recommended due to potential conflicts.
Winsage
May 30, 2026
Disabling Windows Defender is common among users setting up virtual machines or optimizing build processes, but it can be frustrating due to Windows 11's resistance to such actions. Many guides suggest using outdated registry keys, which are often reverted by updates, leading to repeated attempts to disable the protections. Users may disable Defender for several reasons, including performance issues with virtual machines, conflicts with Android emulators, hindrances in development environments, troubleshooting disk performance, and security testing in isolated labs. However, disabling antivirus software increases exposure to threats. Microsoft Defender includes components such as Antivirus, Real-Time Protection, Cloud-Delivered Protection, Tamper Protection, and Defender for Endpoint. Tamper Protection is a significant barrier to disabling Defender, as it prevents unauthorized changes to security settings. Key considerations before disabling Defender include the need for administrator rights, the effect of Tamper Protection, potential resets from Windows Updates, temporary toggles for Real-Time Protection, and the option to install third-party antivirus software, which places Defender in passive mode. Methods to disable Defender include using the Windows Security GUI, PowerShell commands, Command Prompt, or Group Policy (available only for certain editions). Disabling Tamper Protection requires accessing the GUI or being managed by an organization. To check if Defender is disabled, users can use PowerShell to review specific fields. Common reasons for Defender reactivating include enabled Tamper Protection, system reboots, Windows Updates, lack of third-party antivirus, and security policy refreshes. Installing a legitimate third-party antivirus is often the best way to maintain a consistent state. Instead of disabling Defender, users can add exclusions for specific folders related to virtual machines or development tools, allowing them to maintain protection while avoiding conflicts. Troubleshooting common problems includes ensuring elevated sessions for PowerShell, checking Tamper Protection status, and understanding the limitations of the Group Policy editor based on the Windows edition. Disabling Defender may be appropriate in specific scenarios, but for regular use, especially on machines handling sensitive tasks, the risks generally outweigh the benefits. Using exclusions is recommended for performance improvements without compromising security.
Winsage
May 30, 2026
Windows 11 has introduced a feature allowing multiple applications to access the camera simultaneously, which will be available to all users with the June 2026 Patch Tuesday. Previously, only one application could use the camera at a time, causing issues for users wanting to use multiple apps like Microsoft Teams and OBS. Users can enable this multi-camera mode by navigating to Settings > Bluetooth & devices > Cameras and toggling the advanced settings. Microsoft is also working on improving the reliability of camera and audio connections and has introduced a "Basic Camera" feature to help diagnose camera problems related to driver issues. These enhancements are part of the Windows 11 KB5089573 (May 2026 optional update) and are being rolled out gradually.
Winsage
May 28, 2026
A Secure Boot certificate refresh is being deployed across supported Windows devices via Windows Update. The Secure Boot certificates from 2011 will begin to expire in June 2026, prompting Microsoft to introduce new 2023-dated certificates to maintain security. Most users will require minimal action if their PCs are updated, but older devices may face challenges. The current certificates include: - Microsoft Corporation KEK CA 2011: expires June 24, 2026 - Microsoft UEFI CA 2011: expires June 27, 2026 - Microsoft Windows Production PCA 2011: expires October 19, 2026 The new certificates will remain valid until 2038, with plans for post-quantum cryptography around 2030. While PCs using the 2011 certificates will continue to function, they will lose access to new security protections, making them vulnerable to emerging threats. A notable example of such a threat is the BlackLotus bootkit, which exploited vulnerabilities to bypass Secure Boot. Microsoft's rollout strategy involves a staged update process that typically takes around 48 hours and may require restarts. Users are advised to keep Windows updated and check their Secure Boot status. Known issues may arise for older PCs, systems that bypassed Windows 11 requirements, Legacy BIOS systems, and custom firmware configurations. IT teams managing devices should inventory their systems, monitor specific event IDs, test updates, and document devices that cannot be updated.
Winsage
May 28, 2026
Microsoft has introduced a new Group Policy option in the Windows 11 April 2026 Update that allows administrators to remove the Microsoft Copilot app across all devices within an organization. This change responds to user feedback about the app's deep integration into the operating system. Previously, users could uninstall Copilot, but it often reappeared after system updates or reinstalls. The new policy enables businesses and IT administrators to block or remove Copilot automatically, eliminating the need for manual uninstalls. Additionally, Microsoft is extending this policy to Microsoft 365 Copilot integrations. While the policy is not available for Windows Home users, similar results can be achieved through the Registry Editor or PowerShell commands.
AppWizard
May 28, 2026
The Windows 11 update "KB5089573" is designed to enhance PC efficiency and speed, focusing on performance improvements during app launches and core shell experiences like the Start menu and Search. It introduces "Low Latency Profiles" to maximize CPU frequency temporarily when an application is launched, making app launches up to 40% faster and core shell experiences up to 70% quicker. Reliability enhancements include improvements to the sign-in screen, File Explorer, touch gestures, Task Manager, and the ability to share Bluetooth connections with two devices. This update is part of Microsoft's K2 initiative to optimize Windows 11 based on user feedback, with plans for further enhancements in the future. The update is available for installation through the Windows Update tool.
Winsage
May 28, 2026
Microsoft has introduced the "Low Latency Profile" (LLP) feature in the KB5089573 update for Windows 11, aimed at optimizing CPU performance for brief intervals of 1 to 3 seconds to enhance user experience. This feature is expected to improve the launch speed of core Microsoft applications, with in-box apps like Edge and Outlook launching approximately 40% faster, and improvements to the Start Menu and context menus yielding speed increases of up to 70%. Users can activate this performance upgrade by installing the KB5089573 update through Settings > Windows Update > Advanced options > Optional updates. The LLP will be activated gradually through a Controlled Feature Rollout (CFR), meaning users may not see immediate changes as the system prepares for full implementation. The LLP allows for short bursts of increased CPU performance, which may lead to slightly higher temperatures during lighter tasks, but aims to provide a seamless experience.
Search