Microsoft has unveiled the KB5065789 preview cumulative update for Windows 11 24H2, introducing a suite of 41 enhancements, including innovative AI functionalities in File Explorer and essential bug fixes for Windows Update and Windows Sandbox.
This update falls under Microsoft’s “optional non-security preview updates” framework, which is designed to provide Windows administrators with an opportunity to evaluate bug fixes, enhancements, and new features prior to the forthcoming Patch Tuesday release each month. It is important to note that these monthly non-security preview updates do not encompass security updates, distinguishing them from the regular Patch Tuesday cumulative updates.
Among the notable improvements in KB5065789, Microsoft has resolved a significant issue affecting users with Windows Sandbox enabled. Previously, this configuration could lead to unresponsiveness due to the VmmemCMFirstBoot process consuming excessive CPU resources post sign-in. Additionally, the update addresses bugs that interfered with Windows Update via Windows Server Update Services (WSUS) and rectifies 0x80090010 Windows Hello errors encountered on devices linked to Microsoft Entra ID domains after the installation of updates since the June 2025 Patch Tuesday.
This month’s preview update also introduces AI actions in File Explorer, allowing users to edit images or summarize documents outside the European Economic Area (EEA). Furthermore, the Click to Do context menu has been enhanced to facilitate easier access to the most frequently utilized AI-powered actions.
To install KB5065789, navigate to Settings, select Windows Update, and click on ‘Check for Updates’. As this is an optional update, you will need to initiate the installation by selecting the ‘Download and install’ link. Alternatively, the KB5065789 preview update can be manually downloaded from the Microsoft Update Catalog.
Windows 11 KB5065789 highlights
Upon installation, this optional cumulative release will elevate Windows 11 24H2 systems to build 26100.6725. The September 2025 preview update encompasses several noteworthy changes and fixes, including:
- [Administrator Protection Preview] This feature aims to protect free-floating admin rights for administrator users, allowing them to execute all administrative functions with just-in-time privileges. It is disabled by default and requires activation via OMA-URI in Intune or through group policy.
- [Passkeys] New! A seamless integration of a plugin passkey manager within Windows 11 has been introduced. Users can now utilize the plugin credential manager for passkeys by installing a compatible credential manager application and navigating to Settings > Accounts > Passkeys > Advanced options.
- Improved: Enhancements have been made to boost performance while gaming with the Game Bar or other overlays active, particularly beneficial for users operating multiple monitors with varying refresh rates.
- [High Dynamic Range (HDR)] Fixed an issue where HDR might unexpectedly deactivate immediately after being enabled in Settings.
- [Hyper-V] This update resolves a problem affecting the initiation of Hyper-V virtual machines with Trusted Platform Module (TPM) on ARM64 devices running supported versions of Windows, which could arise following the installation of KB5064081.
Microsoft has acknowledged a known issue that may affect devices post-installation of KB5065789, which could prevent certain Digital TV and Blu-ray/DVD applications from playing DRM-protected video content, potentially leading to system freezes, black screens, and other complications.
Windows 11 24H2 is currently undergoing broad deployment, accessible to all users via Windows Update, and is progressively rolling out to eligible Windows 10 22H2 systems.
The comprehensive release notes for the KB5065789 optional update are available in the support bulletin.
