Out-of-band — All products

Windows licensing and activation failures fixed

Some Windows licensing and activation tasks failed with error 0x80041008; the issue is fixed for affected organizations.

Error 0x80041008 fixed for certain SLMGR licensing tasks

Some organizations could see error 0x80041008 when using SLMGR for licensing or activation tasks; this update fixes the issue. It also improves checks for devices hosted on Azure.

SLMGR licensing and activation errors fixed

Some Windows licensing and activation tasks no longer fail with error 0x80041008. The problem mainly affected organizations managing activation or product keys with commands.

Fix addresses certain Windows licensing failures with error 0x80041008

Some organizations can now complete certain Windows licensing and activation operations that previously failed. The fix mainly helps systems that use commands or automated processes to manage KMS activation and product keys.

SLMGR activation failures fixed for KMS and license tasks

Some Windows licensing and activation commands that failed with error 0x80041008 now work again. The fix mainly matters to organizations managing KMS activation, product keys, or Windows licenses.

SLMGR licensing failures with error 0x80041008 fixed

Certain Windows licensing and activation operations using SLMGR might fail with error 0x80041008; this out-of-band update fixes the problem. It mainly affected organizations using SLMGR commands or automation.

Offline PCs get trusted certificate updates; Smart App Control can fail

Devices that miss automatic certificate updates receive updated trusted root certificates. Some devices might be unable to turn Smart App Control back on after it was disabled.

Offline devices receive updated trusted root certificates

Devices that miss automatic certificate trust updates get an updated trusted-root payload. The package also updates AI components and improves update installation reliability.

23H2 Enterprise and Education updates end November 10

Windows 11 version 23H2 Enterprise and Education reach the end of updates on November 10, 2026.

Offline devices get updated certificate trust data

Devices that miss automatic certificate updates get refreshed trust data in this out-of-band release. It also partly resolves USB audio problems with 8-channel and 3D audio.

Updated trusted-root certificates for disconnected devices

Devices that miss automatic certificate trust updates get an updated trusted-root certificate payload. This out-of-band release is intended for systems that cannot reach Microsoft's certificate service or have automatic updates disabled.

Offline devices get updated trusted certificates

Devices that cannot reach Microsoft’s certificate service get updated trusted certificate data. Support for this edition ended October 13, 2026.

Offline servers get updated trusted root certificates

Devices that cannot reach Microsoft's certificate-update service get an updated trusted root certificate payload. Hotpatch-enrolled devices that install this update will not receive hotpatch updates until after they install the January 2027 baseline.

Root certificates updated for isolated servers; Exchange mail can fail

An updated trusted root certificate list helps servers that cannot reach Microsoft's certificate service. Some on-premises Exchange servers might also have trouble with sign-in and mail delivery.

Updated root certificate payload for disconnected devices

Devices that cannot get certificate updates from Microsoft receive an updated trusted root certificate payload. Some Exchange servers might still have sign-in and email problems.

Certificate trust updates for isolated devices; Exchange issues remain

Devices that cannot get certificate trust updates receive a refreshed trusted root certificate list. Some on-premises Exchange servers might still have OWA sign-in or email delivery problems.

Exchange vulnerabilities patched; hybrid free/busy times corrected

Nine Exchange vulnerabilities are addressed, and two hybrid mailbox problems are resolved: wrapper messages in shared mailboxes and shifted free/busy times.

Published calendar feeds can fail with HTTP 500

Addresses 9 vulnerabilities in Exchange Server 2019 CU15. A known issue can stop published calendar subscriptions from refreshing and return HTTP 500; an IIS workaround is available.

Hybrid shared-mailbox wrapper messages fixed; calendar feeds may fail

Fixes a hybrid shared-mailbox message issue and addresses 9 vulnerabilities. It is available only to organizations in the Period 2 ESU program; published calendar feeds can still return HTTP 500.

Shared mailbox wrapper messages fixed; published calendars can fail

Fixes wrapper messages appearing in shared mailboxes in hybrid environments. Published calendar subscriptions can still return HTTP 500; KB5128898 later resolves the issue for Exchange Server 2016 CU23.

Remote Desktop failures and USB multichannel audio fixed

Protects against a Windows User-Mode Power Service elevation-of-privilege flaw and addresses Remote Desktop instability and USB multichannel audio failures. Other USB Audio Class 1.0 problems remain.

Secure Kernel protections and fixes for Remote Desktop and USB audio

Secure Kernel protections address a critical elevation-of-privilege flaw. The release also fixes Remote Desktop failures and some USB audio modes, while other USB audio problems remain.

Remote Desktop failures and Linux shared-folder access fixed

Addresses Remote Desktop instability, restores Plan9 host-folder access to Linux VMs, and resolves only 8-channel or 3D-mode symptoms for affected USB audio devices. Other USB audio symptoms remain.

Remote Desktop instability and USB multichannel audio fixed

Fixes Remote Desktop failures, Linux VM shared-folder access, and 8-channel or 3D USB audio problems. Other USB Audio Class 1.0 symptoms remain unresolved.

Remote Desktop failures and multichannel USB audio fixed

Addresses Remote Desktop connection and sign-in failures and fixes 8-channel or 3D audio problems on some USB Audio Class 1.0 devices.