Windows 11 KB5067036 Update: What’s New, Who Gets It, and How to Install It

Microsoft’s Windows 11 KB5067036 update, released in October 2025, is now available as an optional, non-security preview update. Rolling out gradually in two waves, this update introduces the redesigned Start menu, begins the rollout of Administrator Protection, and delivers a wide range of stability, reliability, and performance fixes.

Whether you’re running Windows 11 version 24H2 or 25H2, this update fine-tunes several system components, refines visuals, and improves the overall experience for users and IT professionals alike.

Let’s dive into everything new in KB5067036, how to get it, and why it matters.

Who Gets the Update — and Which Build You’ll See

The KB5067036 update applies to both major versions of Windows 11 currently in use:

Keep in mind that feature rollouts are staged. Even after installation, you might not see all UI changes (like the new Start menu) immediately—Microsoft activates them gradually via cloud configuration.

New Features and Enhancements in KB5067036

🔹 Redesigned Start Menu (Rolling Out Gradually)

The new Windows 11 Start menu introduces a cleaner, more adaptable layout:

• A scrollable “All apps” section directly on the main page
• New grid, list, and category views for easier navigation
• Smoother animations and adaptive scaling across different screen sizes

🔹 Administrator Protection (Preview)

This new security feature helps prevent misuse of admin privileges.
When enabled, it requires a Windows Hello verification (facial recognition, fingerprint, or PIN) before allowing elevated actions such as:

• Installing software
• Making sensitive system changes
• Accessing protected files

It’s off by default, but admins can enable it via Microsoft Intune (OMA-URI) or Group Policy.

🔹 Improved Battery Status Indicators

Battery visuals in the system tray and Quick Settings now provide clearer feedback:

• Green = Charging or healthy
• Yellow = Battery saver (20% or below)
• Red = Critically low

You can toggle battery percentage visibility under
Settings → System → Power & battery.

🔹 Taskbar Hover Fix

Selecting a window from a taskbar thumbnail preview now correctly brings it to the front, instead of dismissing the preview—fixing one of the most annoying bugs from previous builds.

Fixes and Reliability Improvements

This update also delivers dozens of performance, stability, and compatibility fixes across multiple system areas.

Display & Graphics

• Fixed partially unresponsive window content when another fullscreen app updates in the background.
• Resolved red tint issues in videos and games caused by earlier patches.
• Prevented Settings app crashes when opening System → Display with Connected Devices Platform Service disabled.

Input & Accessibility

• Corrected hangs and exceptions in apps using pen and handwriting input (microsoft.ink.dll).
• Fixed an issue where Narrator failed to launch during Windows setup from ISO installations.
• Screen readers now correctly announce app content instead of repeating “legacy window.”

File Dialogs & System Behavior

• Resolved unresponsive behavior in some apps when opening file pickers.
• Task Manager now correctly groups processes under their parent applications.
• The “Update and Shutdown” option now works consistently after applying updates.
• Reduced Windows Update failures with error 0x800f0983.

Networking & Remote Access

• Web servers using HTTP.sys (like IIS) no longer reject requests with “NOT_SUPPORTED.”
• Remote Credential Guard now behaves properly across Windows 11 and Server 2022 systems.
• Fixed Kerberos ticket retrieval issues after stopping the KDC service on domain controllers.
• Restored expected password change functionality for remote users without “ACCESS_DENIED” errors.

Authentication & Sign-In

• Improved taskbar load performance after waking from sleep.
• Fixed cases where the password field didn’t render correctly on the sign-in screen.
• Resolved repeated reauthentication issues in AD FS after September 2025’s Server update.

Media Creation Tool & Protected Content

• Resolved Arm64 Media Creation Tool errors (“We’re not sure what happened…”).
• Fixed protected media playback failures on certain devices.

AI Components (For Copilot+ PCs Only)

On Copilot+ PCs, KB5067036 also updates several AI components used by Windows’ intelligent features.
These updates don’t apply to non-Copilot+ systems or Windows Server.

How to Install Windows 11 KB5067036

✅ Method 1: Windows Update (Recommended)

1. Open Settings → Windows Update.
2. Click Check for updates.
3. When the optional preview (KB5067036) appears, select Download and install.

💡 Tip: To receive previews faster, enable “Get the latest updates as soon as they’re available.”

Method 2: Manual Installation (For IT or Advanced Users)

If you prefer offline installation:

1. Go to the Microsoft Update Catalog.
2. Search for KB5067036 and download the correct file for your version (24H2 or 25H2) and architecture (x64 or ARM64).
3. Use one of these commands:

Command Prompt (DISM):

DISM /Online /Add-Package /PackagePath:C:\Packages\Windows11.0-KB5067036-x64.msu

PowerShell:

Add-WindowsPackage -Online -PackagePath "C:\Packages\Windows11.0-KB5067036-x64.msu"

If multiple .msu files are available, place them all in one folder and point DISM to it—Windows will automatically install prerequisites in the correct order.

Servicing Stack Update (SSU) and Uninstall Notes

KB5067036 includes a Servicing Stack Update (SSU) to improve the reliability of future updates.

• The SSU is permanent and cannot be removed.
• To uninstall the main cumulative update (LCU), use: DISM /Online /Get-Packages DISM /Online /Remove-Package /PackageName:Package_for_RollupFix~<full_package_name> (Note: wusa.exe /uninstall does not work on combined SSU+LCU packages.)

WSUS administrators can also import this update manually via the Update Catalog.

Important: Secure Boot Certificate Expiration (June 2026)

Microsoft warns that Secure Boot certificates used on most Windows devices will start expiring in June 2026.
Devices without updated certificates may fail to boot securely.
Admins should review Microsoft’s official Secure Boot certificate renewal guidance to prepare ahead of time.

Conclusion

The Windows 11 KB5067036 update is one of the most comprehensive previews of 2025, combining visual upgrades, security improvements, and system stability fixes.

From the revamped Start menu to the Administrator Protection feature, Microsoft continues refining Windows 11 toward a smoother, safer, and smarter user experience.

If you want early access to these improvements, install KB5067036 manually or via Windows Update. Otherwise, these changes will roll out automatically in the next cumulative release.