Windows Update

Winsage
June 1, 2026
Microsoft resolved an issue causing installation failures and error code 0x800f0922 during the deployment of the May 2026 Windows 11 security update (KB5089549), which was linked to insufficient free space on the EFI System Partition (ESP). The problem mainly affected devices with 10 MB or less available space, leading to automatic rollbacks of the update. The resolution was provided through the release of the Windows 11 KB5089573 preview cumulative update on May 26, 2026. Users installing updates released on or after this date will not need a workaround, while those with earlier updates can use the Known Issue Rollback feature. Additionally, IT administrators in enterprise settings can manually address the issue through Group Policy configurations. The KB5089573 update introduced 30 changes to improve performance and reliability.
Winsage
June 1, 2026
Microsoft has identified the root cause of installation issues related to the May 2026 update for Windows operating system and is rolling out a solution through an optional update, KB5089573. The May 12, 2026, Patch Tuesday update (KB5089549) introduced enhancements but many users faced installation failures due to error code “0x800f0922,” indicating insufficient space on the EFI System Partition (ESP). The ESP is critical for boot files and typically occupies around 256MB. Users can check ESP storage using a specific command. Low ESP space can lead to update failures, particularly when it drops below 10MB. Microsoft has rolled back problematic code and provided a fix in the optional update KB5089573, which resolves ESP space issues and ensures future updates will proceed smoothly. Users are encouraged to install this update or wait for the next scheduled Patch Tuesday update on June 9, 2026.
Winsage
May 31, 2026
Microsoft is set to introduce a feature for Windows 11 called Cloud-Initiated Driver Recovery (CIDR), which will automatically revert problematic driver updates to stable versions via Windows Update. This feature aims to improve user experience by eliminating the need for manual uninstallation of faulty drivers. CIDR will monitor drivers and, if a driver is found to be problematic, it can initiate a remote rollback to restore a stable version. The process will not require additional software installations or changes to existing workflows for hardware manufacturers. The automated rollback will specifically target only the affected hardware components, ensuring other drivers and system functions remain unaffected. Initial testing for CIDR is scheduled between May and August 2026, with a broader rollout expected in September 2026.
Winsage
May 31, 2026
Microsoft is enhancing Windows 11 by focusing on performance improvements and user experience. The initiative began in late January when Pavan Davuluri acknowledged user pain points. Key updates have included modifications to the Insider Program, enhancements to Windows Update in April, Taskbar updates in May, and changes to the Start menu. Recent improvements highlighted by Marcus Ash include enhancements to the Taskbar and Start menu, driver improvements, updates to Cloud Initiated Driver Recovery, increased reliability of File Explorer, and accessibility updates. Microsoft plans to unveil further initiatives at the upcoming Microsoft Build event and has launched a podcast discussing these changes.
Tech Optimizer
May 30, 2026
Antivirus applications are essential for protecting Windows systems from online threats like viruses, malware, and phishing attempts. Many users prefer dedicated antivirus software despite improvements in built-in security features. Free antivirus software offers crucial protection without a paid subscription, balancing security, performance, and user-friendliness. Key free antivirus options include: - Microsoft Defender Antivirus: Built-in, real-time scanning, and regular updates. - Bitdefender Antivirus Free for Windows: Strong malware detection with minimal system impact. - AVG AntiVirus Free: Provides real-time protection and phishing defense. - Avast One Basic: Combines antivirus with additional security tools. - Avira Free Security: Lightweight with antivirus and privacy tools. - Panda Antivirus: User-friendly with essential protection and malware cleanup tools. Effective antivirus solutions should offer real-time protection, automatic updates, and seamless operation without hindering system performance. Trust and usability are also important factors in choosing antivirus software. The best antivirus for a user depends on their daily activities, with basic apps suitable for light users and more advanced options for those who frequently download files. Free antivirus applications can provide adequate protection for most users, but they may lack advanced features found in paid versions. Microsoft Defender and Bitdefender are noted for their low system impact. Running multiple antivirus programs simultaneously is not recommended due to potential conflicts.
Winsage
May 30, 2026
Disabling Windows Defender is common among users setting up virtual machines or optimizing build processes, but it can be frustrating due to Windows 11's resistance to such actions. Many guides suggest using outdated registry keys, which are often reverted by updates, leading to repeated attempts to disable the protections. Users may disable Defender for several reasons, including performance issues with virtual machines, conflicts with Android emulators, hindrances in development environments, troubleshooting disk performance, and security testing in isolated labs. However, disabling antivirus software increases exposure to threats. Microsoft Defender includes components such as Antivirus, Real-Time Protection, Cloud-Delivered Protection, Tamper Protection, and Defender for Endpoint. Tamper Protection is a significant barrier to disabling Defender, as it prevents unauthorized changes to security settings. Key considerations before disabling Defender include the need for administrator rights, the effect of Tamper Protection, potential resets from Windows Updates, temporary toggles for Real-Time Protection, and the option to install third-party antivirus software, which places Defender in passive mode. Methods to disable Defender include using the Windows Security GUI, PowerShell commands, Command Prompt, or Group Policy (available only for certain editions). Disabling Tamper Protection requires accessing the GUI or being managed by an organization. To check if Defender is disabled, users can use PowerShell to review specific fields. Common reasons for Defender reactivating include enabled Tamper Protection, system reboots, Windows Updates, lack of third-party antivirus, and security policy refreshes. Installing a legitimate third-party antivirus is often the best way to maintain a consistent state. Instead of disabling Defender, users can add exclusions for specific folders related to virtual machines or development tools, allowing them to maintain protection while avoiding conflicts. Troubleshooting common problems includes ensuring elevated sessions for PowerShell, checking Tamper Protection status, and understanding the limitations of the Group Policy editor based on the Windows edition. Disabling Defender may be appropriate in specific scenarios, but for regular use, especially on machines handling sensitive tasks, the risks generally outweigh the benefits. Using exclusions is recommended for performance improvements without compromising security.
Winsage
May 30, 2026
Windows 11 has introduced a feature allowing multiple applications to access the camera simultaneously, which will be available to all users with the June 2026 Patch Tuesday. Previously, only one application could use the camera at a time, causing issues for users wanting to use multiple apps like Microsoft Teams and OBS. Users can enable this multi-camera mode by navigating to Settings > Bluetooth & devices > Cameras and toggling the advanced settings. Microsoft is also working on improving the reliability of camera and audio connections and has introduced a "Basic Camera" feature to help diagnose camera problems related to driver issues. These enhancements are part of the Windows 11 KB5089573 (May 2026 optional update) and are being rolled out gradually.
Winsage
May 28, 2026
A Secure Boot certificate refresh is being deployed across supported Windows devices via Windows Update. The Secure Boot certificates from 2011 will begin to expire in June 2026, prompting Microsoft to introduce new 2023-dated certificates to maintain security. Most users will require minimal action if their PCs are updated, but older devices may face challenges. The current certificates include: - Microsoft Corporation KEK CA 2011: expires June 24, 2026 - Microsoft UEFI CA 2011: expires June 27, 2026 - Microsoft Windows Production PCA 2011: expires October 19, 2026 The new certificates will remain valid until 2038, with plans for post-quantum cryptography around 2030. While PCs using the 2011 certificates will continue to function, they will lose access to new security protections, making them vulnerable to emerging threats. A notable example of such a threat is the BlackLotus bootkit, which exploited vulnerabilities to bypass Secure Boot. Microsoft's rollout strategy involves a staged update process that typically takes around 48 hours and may require restarts. Users are advised to keep Windows updated and check their Secure Boot status. Known issues may arise for older PCs, systems that bypassed Windows 11 requirements, Legacy BIOS systems, and custom firmware configurations. IT teams managing devices should inventory their systems, monitor specific event IDs, test updates, and document devices that cannot be updated.
Winsage
May 28, 2026
Microsoft has introduced a new Group Policy option in the Windows 11 April 2026 Update that allows administrators to remove the Microsoft Copilot app across all devices within an organization. This change responds to user feedback about the app's deep integration into the operating system. Previously, users could uninstall Copilot, but it often reappeared after system updates or reinstalls. The new policy enables businesses and IT administrators to block or remove Copilot automatically, eliminating the need for manual uninstalls. Additionally, Microsoft is extending this policy to Microsoft 365 Copilot integrations. While the policy is not available for Windows Home users, similar results can be achieved through the Registry Editor or PowerShell commands.
Search