Skip to the content
The Update Bureau
Windows 11 23H2 Windows 11 23H2 Out-of-band update
Out-of-band

KB5058919

KB5058919: Cumulative update for Windows 11, version 23H2, April 2025. Local policy audit settings show enabled logon events correctly

In short

A display problem could make enabled logon auditing look turned off in local policy; this out-of-band update addresses it. It also improves the component that installs Windows updates.

Does it affect you? Applies to: Devices running Windows 11, versions 22H2 and 23H2.

Build
22631.5192
Restart
Required

What changes

Improvements 2 changes

Windows 11, version 23H2

  • This build includes the improvements released for Windows 11, version 22H2.1

Servicing stack

  • The component that installs Windows updates gets quality improvements.2
    The combined update includes servicing stack update KB5053665, builds 22621.5120 and 22631.5120.

Fix 1 change

Local audit policies

  • The update addresses a display problem that made enabled logon auditing appear turned off in local policy.3
    The Local Group Policy Editor or Local Security Policy could show the “Audit logon events” policy as “No auditing” even when enabled and working as expected.

Known issues

  1. Open Affects: Everyone

    Noto fonts issue

    At 100% display scaling, Chinese, Japanese, and Korean text might look blurry in Microsoft Edge or Google Chrome.4

    How to apply the workaround Workaround

    Increase display scaling to improve text clarity.4

  2. Open Affects: Organizations and IT administrators

    Citrix

    Devices with Citrix Session Recording Agent version 2411 might fail to finish installing the January 2025 Windows security update, then roll back to the updates already installed.5

    How to apply the workaround Workaround

    Use Citrix Session Recording Agent version 2503 or newer.5

  3. Open Affects: Organizations and IT administrators

    Windows 11, versions 24H2 might not download via Windows Server Updates Services

    Some enterprise devices with the April 8, 2025 update or later might not download Windows 11, version 24H2, through Windows Server Update Services. The log might show error 0x80240069.6

    How to apply the workaround Group Policy

    For affected devices on an update released before May 13, 2025, an IT admin can install and configure the special Group Policy.6

    Step-by-step workaround instructions
    2 steps
    Show steps Hide steps
    Step-by-step procedure
    1. If the device has KB5058405 or a later update, no special policy is needed.
    2. For an affected device on an earlier update, have an IT admin install and configure the special Group Policy.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-04-11
Classification
Updates
Type
Cumulative update
Restart
Required
Replaces
KB5055528, KB5053657, KB5053602, KB5052094
+26 earlier KB5051989, KB5050092, KB5050021, KB5048685, KB5046732, KB5046633, KB5044380, KB5044285, KB5043145, KB5043076, KB5041587, KB5041585, KB5040527, KB5040442, KB5039302, KB5039212, KB5037853, KB5037771, KB5036980, KB5036893, KB5035942, KB5035853, KB5034848, KB5034765, KB5034204, KB5034123
Replaced by
KB5058405
VersionBuildChannel
23H2 22631.5192 General availability

Security

No vulnerabilities are listed for this update.

Updated components

186 files changed since the previous update for the same versions.

Top changed componentsFiles
Networking8
Kernel7
Remote Desktop4
Secure Boot4
Security and sign-in4
Hyper-V and virtualization3
Settings2
File Explorer and shell1

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. This build includes all the improvements in Windows 11, version 22H2. support.microsoft.com
  2. 2. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
  3. 3. It addresses a known issue where Audit Logon/Logoff events in the local policy of the Active Directory Group Policy might not show as enabled on the device even if they are enabled and working as expected. support.microsoft.com
  4. 4. There are reports of blurry or unclear CJK (Chinese, Japanese, Korean) text when displayed at 96 DPI (100% scaling) in Chromium-based browsers such as Microsoft Edge and Google Chrome. support.microsoft.com
  5. 5. Devices that have certain Citrix components installed might be unable to complete installation of the January 2025 Windows security update. support.microsoft.com
  6. 6. Devices which have installed the April Windows monthly security update, released April 8, 2025, or later (starting with KB5055528) might be unable to update to Windows 11, version 24H2 via Windows Server Update Services (WSUS). support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake