KB5063842: Cumulative update for Windows 10, version 22H2, August 2025. ESU eligibility check and organizational backup arrive
Adds an opt-in way for eligible organizations to check Windows 10 ESU eligibility and makes Windows Backup for Organizations generally available. It also fixes several input, search, and app-approval problems.
Does it affect you? Applies to: Devices running Windows 10, version 22H2.
Microsoft publishes separate notes for this KB for Windows 11.
What changes
Fixes 7 changes
Common Controls
-
Some supplementary characters appear correctly in Windows text boxes.1
Fixes an issue affecting the display of certain supplementary characters in Windows textboxes.
Input and Composition
For: users of the Chinese Simplified IME
-
Some extended characters no longer appear as empty boxes when using the Chinese Simplified input method.2
Fixes an issue with the Chinese Simplified Input Method Editor (IME).
Multimedia
For: Remote Desktop Services users with redirected web cameras
-
Redirected web cameras can be detected in Remote Desktop environments.3
Fixes
mf.dllfailing to enumerate redirected web camera devices in Remote Desktop Services (RDS) environments.
Windows Hello
For: users of Narrator and Windows Hello facial recognition
-
Narrator reads the correct name for the facial-recognition protection checkbox.4
Fixes Narrator reading the incorrect name for the “Enhance Facial Recognition Protection” checkbox under Facial Recognition settings.
Search pane
-
The Windows Search pane displays its preview pane correctly.5
Fixes an issue that might cause the Windows Search pane to not show the preview pane correctly.
Family Safety
For: families using Family Safety
-
The approval flow appears when someone tries to open an app that Family Safety has blocked.6
Fixes the “Ask to Use” approval flow not being triggered for blocked apps.
Portable Devices
For: devices configured with the Removable Storage Access policy
-
The Removable Storage Access policy works properly.7
Fixes an issue where the Removable Storage Access policy might not work properly.
Improvements 2 changes
Mobile Operator Profiles
For: devices using mobile operator profiles
-
Country and operator settings profiles are updated.8
Updates Country and Operator Settings Asset (COSA) profiles.
Servicing stack
-
The component that installs Windows updates receives quality improvements.9
The update includes servicing stack update KB5063979, build 19045.6271.
New features 2 changes
Licensing
For: Administrators of eligible organization devices
-
Administrators can opt in to allow outbound network traffic so eligible users can check whether they qualify for Extended Security Updates after Windows 10 support ends.10
With the feature enabled, AAD users with a Windows 365 subscription and devices joined to Entra ID can check ESU eligibility.
Windows Backup for Organizations
- Windows Backup for Organizations is generally available for organizational device backup and restore.11
Known issues
-
Network Device Interface streaming performance issue
NDI streaming or feed transfers between PCs might have delayed or uneven audio and video, especially when Display Capture is enabled on the source PC. KB5065429, released on September 9, 2025, resolves this issue.12
Resolution Fixed in KB5065429Install KB5065429 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
-
Unexpected User Account Control (UAC) prompt when doing MSI repair operations
Standard users might see an unexpected User Account Control prompt during MSI repair and related operations, or the operation might fail without showing a prompt. KB5065429, released on September 9, 2025, resolves this issue.13
Resolution Fixed in KB5065429Install KB5065429 (or a later cumulative update) on affected devices. No manual workaround is required after updating.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-08-26
- Classification
- Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5066188, KB5063709, KB5062649, KB5062554
- Replaced by
- KB5065429
| Version | Build | Channel |
|---|---|---|
| 22H2 | 19045.6282 | General availability |
Security
No vulnerabilities are listed for this update.
Downloads (Microsoft Update Catalog)
Updated components
1,021 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Settings | 39 |
| Graphics and display | 28 |
| File Explorer and shell | 21 |
| Search | 12 |
| Networking | 9 |
| Security and sign-in | 9 |
| Secure Boot | 8 |
| Hyper-V and virtualization | 7 |
| Kernel | 6 |
| Emoji and input | 5 |
| Remote Desktop | 5 |
| Audio | 3 |
Verified in package: changed files confirm Multimedia, Windows Hello, Search pane, Mobile Operator Profiles.
Sources
Cited passages from Microsoft's official notes (13)
-
1.
Fixed: An issue that affects how certain supplementary characters appear in Windows textboxes.
support.microsoft.com -
2.
Fixed: An issue with the Chinese Simplified Input Method Editor (IME). Some extended characters were shown as empty boxes.
support.microsoft.com -
3.
Fixed: An issue where mf.dll failed to enumerate redirected web camera devices on Remote Desktop Services (RDS) environments.
support.microsoft.com -
4.
Fixed: An issue in which Narrator reads the incorrect name for the "Enhance Facial Recognition Protection" check box under the Facial Recognition setting.
support.microsoft.com -
5.
Fixed: An issue that might cause the Windows Search pane to not show the preview pane correctly.
support.microsoft.com -
6.
With this fix, the approval flow now appears as expected when a blocked app is accessed.
support.microsoft.com -
7.
Fixed: An issue where the Removeable Storage Access policy may not work properly.
support.microsoft.com -
8.
Updated: Country and Operator Settings Asset (COSA) profiles.
support.microsoft.com -
9.
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
support.microsoft.com -
10.
This update adds an opt-in feature for administrators to allow outbound network traffic from Windows 10 devices.
support.microsoft.com -
11.
Windows Backup for Organizations is now generally available!
support.microsoft.com -
12.
This issue is resolved by Windows updates released on and after September 9, 2025 (KB5065429).
support.microsoft.com -
13.
This issue is resolved by Windows updates released on and after September 9, 2025 (KB5065429).
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 13 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake