KB5079458

Microsoft has released cumulative update KB5079458 for Windows 11, version 25H2, intended for insiders on the Beta Channel. This preliminary Windows 11 Insider Preview Build 26220.8062 is available to Beta Channel users via the enablement package KB5066383, and now program participants will receive corresponding updates for version 25H2.

• Removing preinstalled Microsoft apps via policies. In build 26220.8062, Microsoft updated the Remove Default Microsoft Store packages policy for Windows Enterprise and Education editions. It now supports a dynamic app removal list: administrators can remove MSIX/APPX apps by adding their Package Family Name (PFN) to a special dynamic list. The policy is located in the Local Group Policy Editor (gpedit.msc) under: Computer Configuration > Administrative Templates > Windows Components > App Package Deployment. To remove an app, add its PFN to the Specify additional package family names to remove setting. You can find the PFN using the Get-AppxPackage command in Windows Terminal (e.g., Get-AppxPackage *Notepad* | Select-Object PackageFamilyName). Limitation: the dynamic list is not yet available in Intune CSP, and OMA-URI does not support multiline policy validation, so testing is recommended via Group Policy.
• Choosing a profile folder name during Windows installation. Microsoft continues developing the feature to choose a custom profile folder name during Windows setup. Now during initial setup on the Device Name page, you can choose your own user folder name. If you skip this step, the system will automatically create a folder with a default name. The name must comply with standard Windows file naming rules.
• Windows driver policy update. Starting with this update, the Windows kernel removes default trust for third-party kernel drivers signed via the legacy cross-signed root program. Drivers certified through the Windows Hardware Compatibility Program (WHCP) remain trusted. The feature is first enabled in audit mode (minimum 100 hours of uptime and 3 reboots), then automatically activates when compatible. In enforcement mode, cross-signing drivers may be blocked.
• Point-in-time restore updates. When launching Point-in-time restore, local administrators will see a settings window after the UAC prompt, where they can view or change default restore settings as well as the list of available restore points. In the WinRE environment, a recommendation to connect the device to a power source has been added, and the OS version number is now displayed in four-part format.
• Drag Tray renamed to Drop Tray. The Drag Tray component has been renamed to Drop Tray. Function settings have been moved from Settings > System > Nearby Sharing to Settings > System > Multitasking.
• Pen settings. Minor changes have been made to the pen settings page: updated button settings on the stylus tail. A new option "Like Copilot key" has been added, allowing you to assign the pen button to launch the same app that opens when pressing the Copilot key. Feedback is accepted via Feedback Hub (Win + F) under Devices and Drivers > Bluetooth – keyboard, mouse, and pen.
• File Explorer. Microsoft has temporarily stopped rolling out the updated context menu to make additional improvements. The feature will be returned in one of future builds.
• Other improvements. Improved reliability of the feature to select and apply the preferred system display language. Removed an extra error message that could unexpectedly appear when running the sfc /scannow command.

Install the update via Windows Update: go to Settings > Windows Update and click Check for updates. A computer restart is required to complete the installation.

How the new features work:

Removing preinstalled Microsoft apps via policies: The Remove Default Microsoft Store packages policy now supports a dynamic removal list for Enterprise/Education. Admin adds Package Family Name (PFN) to Specify additional package family names to remove. PFN obtained via Get-AppxPackage name | Select-Object PackageFamilyName. Limitation: dynamic list unavailable in Intune CSP; OMA-URI lacks multiline policy validation.

Choosing a profile folder name during Windows installation: During initial setup on the Device Name page, user can manually set profile folder name. If skipped, system creates default-named folder. Name must follow Windows file naming rules (no \ / : * ? " < > | or reserved names).

Windows driver policy update: Windows kernel removes default trust for third-party drivers signed via legacy cross-signed root program. WHCP-certified drivers remain trusted. Audit mode requires 100 hours uptime and 3 reboots, then enforcement mode auto-activates, blocking cross-signed drivers.

Point-in-time restore updates: After UAC prompt, local admin sees restore settings window with available restore points list. In WinRE, recommendation added to connect device to power source. OS version number shown in four-part format (e.g., 10.0.26220.8062).

Drag Tray renamed to Drop Tray: Component renamed; its settings moved from Settings > System > Nearby Sharing to Settings > System > Multitasking. Functionality unchanged: temporary file storage during drag-and-drop between windows.

Pen settings: Pen settings page updated with stylus tail button controls. New "Like Copilot key" option lets pen button launch same app as Copilot key. Feedback via Feedback Hub (Win+F), Devices and Drivers > Bluetooth – keyboard, mouse, and pen.

File Explorer: Microsoft temporarily paused rollout of updated context menu for additional improvements. Previously added changes will return in a future build. Current context menu behavior remains unchanged.

Other improvements: Improved reliability of selecting and applying preferred system display language. Removed extra error message that could unexpectedly appear when running sfc /scannow.

The last 10 Windows updates: