Microsoft has released the KB5065789 preview cumulative update for Windows 11 24H2, which includes 41 improvements, including new AI actions in File Explorer and bug fixes for Windows Update and Windows Sandbox.
This update is part of Microsoft's "optional non-security preview updates" schedule, which releases updates at the end of each month to allow Windows admins to test bug fixes, improvements, and new features ahead of next month's Patch Tuesday release.
However, unlike regular Patch Tuesday cumulative updates, the monthly non-security preview updates do not include security updates.
With KB5065789, Microsoft addressed a known issue that occurs when Windows Sandbox is enabled, causing the PC to become unresponsive due to the VmmemCMFirstBoot process consuming large amounts of CPU after sign-in.
It also fixes bugs that disrupted Windows Update via Windows Server Update Services (WSUS) and triggered 0x80090010 Windows Hello errors on devices joined to Microsoft Entra ID domains after installing Windows updates released since the June 2025 Patch Tuesday.
This month's preview update also adds AI actions in File Explorer to edit images or summarize documents outside the European Economic Area (EEA), and updates the Click to Do context menu to make it easier to discover the most widely used AI-powered actions.
You can install KB5065789 by opening Settings, clicking on Windows Update, and then on 'Check for Updates.' Since this is an optional update, you will be prompted to install it by clicking the 'Download and install' link.
You can also manually download and install the KB5065789 preview update from the Microsoft Update Catalog.
Windows 11 KB5065789 highlights
Once installed, this optional cumulative release will update Windows 11 24H2 systems to build 26100.6725.
The September 2025 preview update comes with additional changes and fixes, some of the more significant ones highlighted below:
[Administrator Protection Preview] Administrator protection aims to safeguard free-floating admin rights for administrator users, enabling them to perform all admin functions with just-in-time admin privileges. This feature is disabled by default and must be enabled via OMA-URI in Intune or through group policy.
Administrator protection aims to safeguard free-floating admin rights for administrator users, enabling them to perform all admin functions with just-in-time admin privileges. This feature is disabled by default and must be enabled via OMA-URI in Intune or through group policy. [Passkeys] New! A seamless plugin passkey manager integration in Windows 11. You can now use the plugin credential manager for passkeys. To set up a plugin credential manager, install a credential manager application that supports integration, then go to Settings > Accounts > Passkeys > Advanced options .
A seamless plugin passkey manager integration in Windows 11. You can now use the plugin credential manager for passkeys. To set up a plugin credential manager, install a credential manager application that supports integration, then go to > > > . Improved: Underlying changes have been made to improve performance when gaming with Game Bar or other overlays active on top of users' games. This update may be especially helpful for users with multiple monitors that have different refresh rates.
or other overlays active on top of users' games. This update may be especially helpful for users with multiple monitors that have different refresh rates. [High Dynamic Range (HDR)] Fixed: HDR might unexpectedly immediately turn off after being enabled in Settings .
Fixed: HDR might unexpectedly immediately turn off after being enabled in . [Hyper-V] Fixed: This update addresses an issue that affects starting Hyper-V virtual machines with Trusted Platform Module (TPM) on ARM64 devices running supported versions of Windows. This can occur after installing KB5064081.
Microsoft is aware of one known issue that could impact devices after installing KB5065789, which prevents some Digital TV and Blu-ray/DVD apps from playing DRM-protected video content and causes system freezes, black screens, and other issues.
Windows 11 24H2 is in broad deployment, available to all seekers via Windows Update, and is rolling out to all eligible Windows 10 22H2 PCs.
The full release notes for the KB5065789 optional update can be found in this support bulletin.