KB5077241: Cumulative update for Windows 11, versions 24H2 and 25H2, February 2026. BitLocker no longer hangs at recovery; built-in Sysmon arrives

Adds built-in Sysmon and new taskbar, search, and camera features. It also fixes a BitLocker hang after you enter a recovery key.

Does it affect you? Applies to: Devices running Windows 11, versions 25H2 (build 26200.7922) or 24H2 (build 26100.7922). Remote Server Administration Tools support is added for Arm64 devices.

Review notes Additional details from the official release notes (2) Read notes

What changes This update includes updates to four AI components. They apply only to Windows Copilot+ PCs and do not install on Windows PC or Windows Server.
In detail Secure Boot certificates used by most Windows devices have started expiring in June 2026. Devices without the newer certificates will continue to start and operate normally, and standard Windows updates will continue to install.

The official sources are linked at the end of the page.

What changes

Improvements 19 changes

Battery icons

Gradual rollout

Updated battery icons make your battery status easier to see at a glance.¹

Start menu

Gradual rollout

The redesigned Start menu continues to reach more devices over time.²

Taskbar & System Tray

Gradual rollout

For: Devices using an uncombined taskbar

When the taskbar is uncombined, only app windows that do not fit move to the overflow menu.³

Search on Taskbar

Gradual rollout Verified in package

Task Manager now shows a magnifying glass icon for the Search process.⁴

Storage Settings

Gradual rollout Verified in package 2 items

Some Storage Settings dialogs have a more modern design.⁵
Scanning for temporary files is faster.⁶

Windows Update Settings

Gradual rollout Verified in package

The Windows Update settings page responds more quickly.⁷

Login and lock screens

Gradual rollout

The sign-in screen is more reliable.⁸

Nearby Sharing

Gradual rollout

Sending larger files with Nearby Sharing is more reliable.⁹

Projecting

Gradual rollout

The project menu is more reliable when opened with Windows logo key + P.¹⁰

Printing

Gradual rollout Verified in package

Printing runs more smoothly, with fewer slowdowns during high-volume printing.¹¹
Improves performance of the Windows printing service (spoolsv.exe).

File Explorer

Gradual rollout 3 items

Holding Shift while selecting the File Explorer taskbar icon, or using the middle mouse button, opens a new File Explorer window more reliably.¹²
The command bar now offers Extract all when you browse folders for non-ZIP archives.¹³
Devices appear more reliably on the Network page in File Explorer.¹⁴

Display

Gradual rollout 2 items

Your PC wakes from sleep more reliably.¹⁵
Your PC can resume from sleep faster, including under heavy system load.¹⁶
The update includes display-related performance improvements.

Other

Gradual rollout

Windows looks more consistent in places such as the auto-hidden taskbar, credential fields in Windows Security, and the print dialog.¹⁷

Secure Boot

Verified in package

For: Devices eligible for automatic certificate updates

More eligible devices can receive new Secure Boot certificates automatically, with delivery still phased based on successful update signals.¹⁸
Windows quality updates include additional high-confidence device targeting data for the Secure Boot certificate rollout.

Servicing stack

The component that installs Windows updates receives quality improvements to help devices receive and install Microsoft updates reliably.¹⁹
The update includes servicing stack update KB5077371, build 26100.7911.

New features 12 changes

Emoji

Gradual rollout

A small set of new emojis appears in the emoji panel.²⁰
The update includes the Emoji 16.0 release.

Backup & Restore

Gradual rollout Verified in package

For: Organizations using Windows Backup

Windows Backup for Organizations can restore user settings and Microsoft Store apps automatically at first sign-in on more types of devices.²¹
The restore experience applies to Microsoft Entra hybrid joined devices, Cloud PCs, and multi-user environments.

Quick Machine Recovery

Gradual rollout

Quick Machine Recovery turns on automatically for eligible Windows Pro devices, giving them the recovery features available on Home devices.²²
It is on for Windows Professional devices that are not domain-joined or enrolled in enterprise endpoint management. Organizations must enable it for domain-joined or enterprise-managed devices.

Taskbar & System Tray

Gradual rollout Verified in package

You can run a network speed test from Wi-Fi or Cellular Quick Settings, or by right-clicking the network icon.²³
The test opens in the default browser and measures Ethernet, Wi-Fi, and cellular connections.

Accounts

Gradual rollout

The Start menu account menu has an option that takes you to your Microsoft account benefits page.²⁴

Camera Settings

Gradual rollout Verified in package

Settings adds pan and tilt controls for supported cameras.²⁵
The controls are under Settings > Bluetooth & devices > Cameras, in Basic settings for the selected camera.

Built-in Sysmon

Gradual rollout Verified in package

Windows now includes Sysmon to capture system events for threat detection. It is off by default and must be enabled before use.²⁶
Captured events are written to Windows Event Log. Uninstall the Sysinternals version before enabling the built-in version if it is already installed.

Desktop Background

Gradual rollout Verified in package

You can use WebP images as your desktop background.²⁷
Set one from Settings > Personalization > Background, or right-click the image in File Explorer.

Search on Taskbar

Gradual rollout Verified in package 2 items

Search group headers show how many results they contain, and selecting one shows all results in that group.²⁸
You can preview a search result by hovering over it and selecting Preview.²⁹

Remote Server Administration Tools (RSAT)

Gradual rollout

For: IT administrators using Arm64 devices

IT administrators can install and use Remote Server Administration Tools on Arm64 devices.³⁰
Available optional features include Active Directory Domain Services and Lightweight Directory Services Tools, Active Directory Certificate Services Tools, Server Manager, Group Policy Management Tools, DNS Server Tools, and DHCP Server Tools.

Secure Boot

Verified in package

New PowerShell features help you check Secure Boot keys, certificates, and whether a device follows the latest policy.³¹
Get-SecureBootUEFI supports -Decoded to display keys and certificates in a readable format. Get-SecureBootSVN checks the Secure Boot Security Version Number of the UEFI firmware and bootloader.

Fix 1 change

BitLocker

Your device no longer stops responding after you enter your BitLocker recovery key.³²

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released: 2026-02-24
Classification: Updates
Type: Cumulative update
Restart: Required
Replaces: KB5077181, KB5074105, KB5078127, KB5077744

+43 earlier
KB5074109, KB5072033, KB5070311, KB5068861, KB5067036, KB5070773, KB5066835, KB5065789, KB5068221, KB5065426, KB5064081, KB5063878, KB5062660, KB5064489, KB5062553, KB5060829, KB5063060, KB5060842, KB5058499, KB5061977, KB5058411, KB5055627, KB5059087, KB5055523, KB5053656, KB5053598, KB5052093, KB5051987, KB5050094, KB5050009, KB5048667, KB5046740, KB5046617, KB5044384, KB5044284, KB5043178, KB5043080, KB5041865, KB5041571, KB5040529, KB5040435, KB5039304, KB5039239
Replaced by: KB5079473

Version	Build	Channel
24H2	26100.7922	General availability
24H2	26100.7921	Release Preview Channel
25H2	26200.7922	General availability
25H2	26200.7921	Release Preview Channel

Security

No vulnerabilities are listed for this update.

Downloads (Microsoft Update Catalog)

x64 24H2 / 25H2

4.4 GB

windows11.0-kb5077241-x64.msu Main update · KB5077241 SHA-1: 739bca93…c35f75 windows11.0-kb5043080-x64.msu Prerequisite · KB5043080 SHA-1: 95344967…9c83e8

Arm64 24H2 / 25H2

4.2 GB

windows11.0-kb5077241-arm64.msu Main update · KB5077241 SHA-1: 5c2929b6…787f50 windows11.0-kb5043080-arm64.msu Prerequisite · KB5043080 SHA-1: df540a05…0f090b

Updated components

7,805 files changed since the previous update for the same versions.

Top changed components	Files
Settings	152
Graphics and display	55
Networking	51
Printing	48
Remote Desktop	46
Bluetooth	43
.NET networking	38
Audio	37
File Explorer and shell	33
Security and sign-in	32
Windows Update	30
Hyper-V and virtualization	26

Verified in package: changed files confirm Search on Taskbar, Storage Settings, Windows Update Settings, Printing, Secure Boot, Backup & Restore, Taskbar & System Tray, Camera Settings, Built-in Sysmon, Desktop Background.

Sources

Microsoft Support: KB5077241

Updated Oct 26, 2026

Cited passages from Microsoft's official notes (32)

1. The updated battery icon feature makes it easier to see your battery status at a glance. support.microsoft.com
2. The redesigned Start menu also continues its gradual rollout to Windows devices, with more devices receiving the updated Start menu experience over time. support.microsoft.com
3. Only the windows that don’t fit move to the overflow menu. support.microsoft.com
4. Updated the icon for the Search process in Task Manager so it now shows a magnifying glass. support.microsoft.com
5. Some of the dialogs in Storage Settings have been updated with a more modern design. support.microsoft.com
6. Improved scanning performance for temporary files. support.microsoft.com
7. Improved: Responsiveness of the Windows Update settings page. support.microsoft.com
8. Improved: Sign-in screen reliability. support.microsoft.com
9. Improved: Reliability when sending larger files with Nearby Sharing. support.microsoft.com
10. Improved: Reliability of displaying the project menu after pressing Windows logo key + P. support.microsoft.com
11. Improved: Performance of the Windows printing service (spoolsv.exe) to help printing run more smoothly and reduce slowdowns during high-volume printing. support.microsoft.com
12. Holding the Shift key and selecting the File Explorer icon on the taskbar, or using the middle mouse button, now opens a new instance of File Explorer instead of the current one. support.microsoft.com
13. File Explorer now includes an Extract all option on the command bar when you browse non-ZIP archive folders. support.microsoft.com
14. Improved: Reliability of displaying devices on the Network page in File Explorer. support.microsoft.com
15. Improved: This update improves reliability when your PC wakes from sleep. support.microsoft.com
16. Display-related performance improvements to help reduce the time for a PC to resume from sleep, especially when the system is under heavy load and in other scenarios. support.microsoft.com
17. This update improves visual consistency across Windows, including the taskbar when auto-hide is on, credential fields in the Windows Security dialog, and the print dialog. support.microsoft.com
18. Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. support.microsoft.com
19. This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. support.microsoft.com
20. These new emojis now appear in the emoji panel. support.microsoft.com
21. This experience restores user settings and Microsoft Store apps automatically at first sign-in on Microsoft Entra hybrid joined devices, Cloud PCs, and multi-user environments. support.microsoft.com
22. Quick Machine Recovery (QMR) now turns on automatically for Windows Professional devices that are not domain-joined and not enrolled in enterprise endpoint management. support.microsoft.com
23. A built-in network speed test is now available from the taskbar. support.microsoft.com
24. The account menu on the Start menu now includes a new option that directs you to the benefits page support.microsoft.com
25. You can control pan and tilt for supported cameras in the Settings app. support.microsoft.com
26. Windows now brings System Monitor (Sysmon) functionality natively to Windows. support.microsoft.com
27. You can set WebP (.webp) images as your desktop background from Settings > Personalization > Background support.microsoft.com
28. Group headers now show the number of results, so you can quickly see when more results are available. support.microsoft.com
29. You can preview search results by hovering over a result and selecting Preview to see the content without opening it. support.microsoft.com
30. This update adds support for Remote Server Administration Tools (RSAT) on Windows 11 Arm64 devices. support.microsoft.com
31. The Get-SecureBootUEFI cmdlet now supports the -Decoded option, which displays Secure Boot keys and certificates in a readable format. support.microsoft.com
32. [BitLocker] Improved: This update improves BitLocker reliability. Your device no longer stops responding after you enter your recovery key. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 32 quoted passages · compared with Microsoft's page on Oct 20, 2026

Quotes found in the official pages: passed
Numbers found in the sources: passed
Vulnerabilities from the dossier only: passed
Links to allowed domains only: passed
Every official change covered: passed
Readable plain text: passed
Changes confirmed by the file list: passed
Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake