What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows 11 KB5065789 was an optional, non-security preview update released on September 29, 2025, for Windows 11 versions 24H2 and 25H2. It brought the affected systems to build 26100.6725 on version 24H2 and build 26200.6725 on version 25H2. Its headline features included File Explorer AI actions, Narrator’s Braille Viewer, passkey-manager integration, new Settings controls, natural-language Voice Access on some Copilot+ PCs, and the command-line edit text editor.
The often-reported figure of 41 changes and fixes came from contemporaneous third-party coverage. Microsoft’s release notes are the authoritative source for the individual changes, requirements, installation details, and known issues. KB5065789 is now a historical update: as of August 12, 2026, later cumulative updates have superseded it, so it should not be treated as the current Windows 11 update to install.
What KB5065789 included
| Detail | Information |
|---|---|
| Release date | September 29, 2025 |
| Update type | Optional non-security preview cumulative update |
| Windows versions | All editions of Windows 11 version 24H2 and version 25H2 |
| Resulting builds | 26100.6725 for version 24H2; 26200.6725 for version 25H2 |
| Distribution | Windows Update, Microsoft Update Catalog, WSUS, and business-management channels |
Because KB5065789 was a preview release, it was intended to deliver quality improvements, bug fixes, and selected features ahead of a later general security update. It was not a Patch Tuesday security release. Installing it was most useful for people who needed one of its specific fixes or wanted to validate the new behavior before it reached a broader update channel.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11The most visible new features
File Explorer gets AI actions for images
After installing KB5065789, supported image files can show new AI-related actions in the File Explorer context menu. Microsoft lists JPG, JPEG, and PNG files among the supported formats. The available actions are:
Popular on Amazon
- FULL HD IPS DISPLAY - Enjoy vibrant, crystal-clear images with 178-degree wide-viewing angles
- AMD RYZEN 3 30 PROCESSOR - Everyday performance you can count on; Multitask, stream, game casually, and edit photos smoothly with responsive power and vibrant HDR visuals
- ENJOY UP TO 14 HOURS AND 15 MINUTES OF BATTERY LIFE - HP Fast Charge restores battery from 0 to 50% in approximately 45 minutes
- AMD RADEON 610M GRAPHICS - Experience smooth entertainment; Built for streaming and multitasking, enjoy realistic visuals and efficient performance for work and play
- STORAGE AND MEMORY - 512 GB PCIe NVMe M.2 SSD offers fast speed and efficient storage; and 8 GB LPDDR5 RAM memory boosts performance with higher bandwidth
- Visual Search: searches the web using the selected image.
- Blur Background: opens the image in Photos so the background can be blurred.
- Erase Objects: opens the image in Paint to remove unwanted elements.
- Remove Background: uses Paint to create a cutout-style image with the background removed.
These actions are not guaranteed to appear on every Windows 11 installation. Microsoft’s documented availability excluded customers in the European Economic Area at the time of the release, and feature availability can also depend on the file type, installed apps, account, and regional rollout.
A separate Summarize action is available for files stored in OneDrive and SharePoint through Microsoft 365 Copilot. This is not a universal Windows summarization feature. It requires an active Microsoft 365 subscription and a Copilot license, and it supports both Microsoft accounts and Microsoft Entra ID accounts.
Click to Do becomes easier to discover
On supported Copilot+ PCs, Click to Do receives new and popular action tags. The tags are intended to make available AI actions easier to find instead of requiring users to guess which actions are supported. Its Summarize action also produces shorter, more focused summaries.
Microsoft separately describes an agent-search link that can take users directly to a relevant Settings page. That capability was described as rolling out to agents in Settings on Copilot+ PCs, so it should not be presented as a guaranteed feature on every computer immediately after installation.
Natural-language Voice Access on some Copilot+ PCs
KB5065789 adds natural-language commands to Voice Access for Intel- and AMD-powered Copilot+ PCs. Users can speak more naturally, including using filler words and synonyms, rather than relying only on rigid, predefined command phrases. The change does not mean that every Windows 11 PC receives the same AI-enhanced Voice Access behavior.
Narrator adds Braille Viewer and Word improvements
Narrator gains Braille Viewer, which displays on-screen text alongside its Braille equivalent on a refreshable Braille display. Before using it, configure Narrator for Braille and install the required Braille support package.
Narrator also improves reading and navigation in Microsoft Word. The release notes specifically call out more reliable continuous reading and better navigation for footnotes, comments, lists, and tables. These changes matter most to users who navigate long or heavily formatted documents with a screen reader.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsKeyboard shortcuts for en dashes and em dashes
Windows 11 adds system keyboard shortcuts for inserting two commonly used punctuation marks:
- Windows + Minus inserts an en dash: –.
- Windows + Shift + Minus inserts an em dash: —.
There is an important exception: when Magnifier is running, the hyphen key is used to zoom Magnifier out, so the shortcut behavior differs.
Passkey-manager and security-key improvements
KB5065789 adds integration for compatible plug-in passkey managers. After installing a supported credential-manager application, open Settings > Accounts > Passkeys > Advanced options to enable the manager. Windows Hello is used to verify the setup.
The update also supports setting up a security-key PIN when a relying party specifies User Verification = Preferred and the security key does not already have a PIN. This is relevant to organizations and users deploying passkeys or hardware security keys, but it does not make every existing credential manager compatible automatically.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →More controls move from Control Panel into Settings
Microsoft moved additional time, language, keyboard, and regional controls into the modern Settings experience. The affected areas include:
- Additional clocks and time servers.
- Date-and-time formatting.
- Number and currency formats.
- Unicode UTF-8 support.
- Language-and-region copying options.
- Keyboard character repeat settings.
- Cursor blink-rate settings under Accessibility.
The update also introduces a redesigned Advanced settings page that replaces the former For Developers page. For developers using version-control repositories, File Explorer can show repository information such as the current branch, diff count, and last commit message.
Users can also pin favorite applications in the Windows Share window, making frequently used sharing destinations easier to reach.
Taskbar policy and hardware indicators
For administrators, applying a taskbar pinning policy no longer requires restarting explorer.exe. The change is not necessarily immediate: Microsoft cautions that a newly applied pin may take approximately eight hours to appear, depending on the policy refresh interval.
Windows 11 also permits repositioning certain hardware indicators, including brightness, volume, airplane mode, and virtual-desktop indicators.
Handheld gaming and multi-monitor improvements
On supported Windows 11 handheld devices, Xbox Wireless Controller behavior changes as follows:
- A short press of the Xbox button opens Game Bar.
- A long press opens Task View.
- Holding the button continues to turn off the controller.
Microsoft said the handheld-device behavior was expected to expand to more Windows 11 PCs. The update also includes underlying Game Bar and overlay performance improvements, particularly on systems using multiple monitors with different refresh rates.
Two display-related problems are fixed:
- HDR could turn off immediately after being enabled.
- The Dynamic Lighting Background Controller could consume excessive CPU after the PC was unlocked.
The new command-line Edit tool
KB5065789 adds Edit, an open-source text editor that can be launched from Windows Terminal or another command-line environment. The basic syntax is:
edit filenameFor example:
edit notes.txtEdit is intended for quick text-file changes from a terminal. It is not a replacement for a full development environment, but it is useful when a command-line session needs a simple editor without opening a separate graphical application.
Updated AI components on Copilot+ PCs
For applicable Copilot+ PCs, Microsoft lists updates to the following AI components:
- Image Search
- Content Extraction
- Semantic Analysis
- Settings Model
Each component is listed at version 1.2509.1022.0. These component updates apply only to Copilot+ PCs. They do not install on ordinary Windows PCs or Windows Server systems.
Important fixes in KB5065789
| Area | What the update fixed |
|---|---|
| Windows Sandbox | The VmmemCMFirstBoot process could consume a large amount of CPU after sign-in and make the PC unresponsive. |
| WSUS | A Windows Server Update Services problem could disrupt Windows Update for WSUS customers. |
| Windows Hello | Safe Mode could show a clearer message that something happened and the PIN was unavailable. The update also addresses error 0x80090010 during PIN setup on Microsoft Entra ID-joined devices after updates released on or after KB5060842. |
| Hyper-V on ARM64 | TPM-enabled virtual machines could fail to start on supported ARM64 devices. |
| Hyper-V graphics | VM sessions could freeze when a GPU paravirtualization device was assigned. |
| Chinese IME and Unicode display | Some text fields and File Explorer tooltips could show empty boxes or unreadable symbols. |
| SMBv1 and NetBT | Devices could fail to connect to shared files and folders when SMBv1 was used over NetBIOS over TCP/IP, including an issue that could occur after KB5065426. |
| Wireless display casting | In Quick Settings, pressing Enter could fail to confirm a device PIN when casting. |
| Protected media | Some Blu-ray, DVD, and digital-TV applications using Enhanced Video Renderer with HDCP enforcement could fail to play protected content. Microsoft said streaming services were not affected. |
The fixes are cumulative: a device receives only changes that are not already present on that device. Installing KB5065789 therefore does not necessarily mean that every change listed in the release notes is being applied for the first time.
Recommended Free Tools
Important enterprise warning: MSHTA inline scripts stop running
Applications that pass inline scripts directly to MSHTA.exe can break after KB5065789. The scripts no longer run and fail silently without returning an error code.
Microsoft made this behavior change intentionally after identifying inline-script execution as a security vulnerability. Scripts embedded inside ordinary .hta files continue to work, but applications that depend on passing script text directly to MSHTA.exe must be changed.
Before deploying the update broadly, IT teams should inventory software, login scripts, automation, and line-of-business tools that invoke MSHTA. Supported migration approaches include invoking an ordinary .hta file or loading the script from an external file, depending on the application’s design and security requirements.
Also popular on Amazon
- Intel Celeron N4120: 4 Cores & Threads, 1.1GHz Base Clock, Up to 2.6GHz Boost Clock, 4MB Cache, Intel UHD Graphics 600. The perfect combination of performance, power consumption, and value helps your device handle multitasking smoothly and reliably with four processing cores to divide up the work.
This is a compatibility and security-hardening change, not a cosmetic release-note item. A silent failure can look like an unrelated application problem, so test affected workflows on a pilot device and update the application rather than assuming that reinstalling the Windows update will restore the old behavior.
Known issues and later fixes
IIS and HTTP.sys connection failures
Microsoft later documented a problem in which IIS websites and other server-side applications relying on HTTP.sys could fail to accept incoming connections after KB5065789 on Windows 11 version 25H2. On version 24H2, the comparable issue could follow the related October security update.
Symptoms could include ERR_CONNECTION_RESET, including when accessing a localhost IIS website. Microsoft said the behavior could depend on connectivity, update timing, and whether the device had been restarted. The October preview update KB5067036 addressed the issue.
Administrators troubleshooting an affected server should check the Windows version, installed update history, restart timing, IIS bindings, and HTTP.sys-dependent applications. Because later updates supersede KB5065789, using the current applicable cumulative update is preferable to reinstalling this old preview package.
Protected-media playback
Microsoft had previously documented protected-media problems affecting some Blu-ray, DVD, and digital-TV applications after KB5064081 or later updates. KB5065789 and later updates addressed the Enhanced Video Renderer and HDCP portion of that problem.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Microsoft later said the October preview update KB5067036 added further improvements for applications using DRM for digital audio. The issue was narrower than a general streaming failure: Microsoft specifically stated that streaming services were not affected.
Invisible password icon on some managed devices
A separate lock-screen problem could make the password icon invisible in enterprise or otherwise managed environments after KB5064081 or later updates. Microsoft said personal Windows 11 Home and Pro users were very unlikely to experience it. The issue was later identified as addressed by KB5074105.
Should you install KB5065789 now?
No—not as a general recommendation in 2026. KB5065789 was an optional preview update from September 2025, and later Windows 11 cumulative updates supersede it. As of August 12, 2026, Microsoft’s release information listed a later August 11, 2026 general-availability update at build 26100.9168 for Windows 11 versions 24H2 and 25H2, and build 22631.7517 for version 23H2.
Install the current applicable cumulative update instead if you are maintaining a normal Windows 11 PC. A historical package such as KB5065789 may still matter when reproducing an old software environment, validating an enterprise baseline, investigating a past incident, or identifying the update that introduced a compatibility change.
At the time of its release, KB5065789 was worth considering when a device needed a specific fix—for example, the Windows Sandbox CPU problem, a Hyper-V issue, the HDR fault, or a WSUS correction. It was less compelling for users who did not need its fixes and preferred to wait for the features and fixes to arrive in a later broadly deployed update.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How KB5065789 was installed
Windows Update
- Open Settings.
- Select Windows Update.
- Open the optional updates area if it is shown.
- Locate KB5065789 and select Download and install.
- Restart when Windows requests it.
The exact presentation can vary according to Windows Update policy, device management, and whether the update has already been superseded. A device that is already on a later cumulative build will not normally offer this old preview package as a current update.
Microsoft Update Catalog
For standalone installation, administrators can search the Microsoft Update Catalog for KB5065789. Select the package that matches the target Windows version and device architecture. Do not copy an x64 package or deployment command to an ARM64 device, and do not assume that a package for version 24H2 is interchangeable with one intended for version 25H2.
Microsoft notes that the Catalog download may include prerequisite MSU files. When installing the individual files, the documented order is:
Free tools Windows power users keep installed
One-click scans. No signup required.
- KB5043080
- KB5065789
Use the exact package files and deployment instructions supplied for the target build. The general command forms are shown below for administrators using DISM or PowerShell; replace the placeholder with the actual downloaded package path:
DISM.exe /Online /Add-Package /PackagePath:'C:Updates<package-name>.msu'Add-WindowsPackage -Online -PackagePath 'C:Updates<package-name>.msu'If the download contains a prerequisite package, apply it first. A package that combines the latest servicing stack update with the latest cumulative update cannot be removed with the ordinary WUSA /uninstall switch because the servicing stack update cannot be removed after installation.
WSUS and managed deployment
Organizations could obtain the update through WSUS and other business-management channels. Because this release changes MSHTA behavior and affects software involving Entra ID, IIS, Hyper-V, SMB, and protected media, a sensible deployment process is:
- Identify devices running Windows 11 24H2 or 25H2.
- Confirm the target architecture and current build.
- Test the update on representative Intel, AMD, and ARM64 hardware where applicable.
- Test MSHTA-dependent applications, IIS and HTTP.sys services, WSUS workflows, Windows Hello enrollment, Hyper-V VMs, SMB shares, and specialized media applications.
- Deploy to a pilot group before broader approval.
- Monitor application failures and connection-reset reports after restart.
How to verify the installed build
To check whether a device reached the build associated with KB5065789:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Press Windows + R, type
winver, and press Enter; or - Open Settings > System > About and inspect the Windows specifications.
Version 24H2 should show build 26100.6725, while version 25H2 should show build 26200.6725 when KB5065789 is the applicable cumulative update level. Also check Settings > Windows Update > Update history to confirm the KB number. A higher build indicates that a later cumulative update has replaced it.
Bottom line for readers and administrators
KB5065789 was a substantial optional preview release, but its value depended on the device. Consumers gained useful interface, accessibility, gaming, and AI-related changes, while administrators gained fixes for Sandbox, WSUS, Windows Hello, Hyper-V, SMB, and protected-media scenarios. The most consequential enterprise detail was the deliberate blocking of inline scripts passed directly to MSHTA.exe.
Because it was released in September 2025 and later updates now supersede it, treat KB5065789 as a retrospective baseline rather than the current Windows 11 update. If you are investigating a problem associated with it, check the later fixes—especially KB5067036 for IIS/HTTP.sys and additional protected-media improvements, and KB5074105 for the managed-device lock-screen issue—before choosing a rollback or reinstallation.
Frequently Asked Questions
Is Windows 11 KB5065789 a security update?
No. KB5065789 was an optional non-security preview cumulative update released on September 29, 2025. It delivered quality fixes and selected features ahead of a later general security update.
Does KB5065789 apply to Windows 11 version 23H2?
No. Microsoft listed KB5065789 for all editions of Windows 11 versions 24H2 and 25H2. It produced build 26100.6725 on 24H2 and build 26200.6725 on 25H2.
Why do I not see the File Explorer AI actions after installing the update?
The actions are not universal. Availability can depend on the image type, installed Photos and Paint components, account and feature rollout, and region. Microsoft’s documentation excluded customers in the European Economic Area at the time of the release. Copilot-related actions can also require a Copilot+ PC or Microsoft 365 Copilot licensing.
Can KB5065789 be removed with WUSA?
Microsoft says the combined servicing-stack and cumulative package cannot be removed with the ordinary WUSA /uninstall switch because the servicing stack update cannot be removed after installation. Use Microsoft-supported recovery or servicing guidance rather than assuming that WUSA will roll back the complete package.
What should I do if an IIS site began returning ERR_CONNECTION_RESET after this update?
Check whether the device is running Windows 11 version 25H2 and whether KB5065789 was installed, or whether a version 24H2 device received the related October security update. Microsoft identified KB5067036 as addressing the IIS and HTTP.sys issue. Since later cumulative updates supersede KB5065789, update to the current applicable Windows build and then retest the IIS or HTTP.sys-dependent application.
The Bottom Line
KB5065789 was an optional September 2025 preview update for Windows 11 24H2 and 25H2—not the current recommended update in 2026. Its most important changes were File Explorer AI actions, accessibility and passkey improvements, new Settings controls, and the MSHTA inline-script security behavior. For current systems, use the latest applicable cumulative update; use KB5065789 mainly as a historical troubleshooting or validation baseline.
