Microsoft shipped an optional preview cumulative update for Windows 11 24H2 on August 29, 2025—KB5064081—bumping eligible PCs to OS Build 26100.5074 and laying the groundwork for a wave of AI features that will light up gradually. This “C-update” combines a servicing stack update (SSU) with the cumulative payload (LCU) into a single, persistent package, meaning administrators must treat it as a unit and plan rollbacks carefully. While the update doesn’t carry security patches, it is stuffed with feature additions, UI refinements, and reliability fixes that collectively represent a substantial quality-of-life boost for Windows 11.

A Broad Preview: What KB5064081 Delivers

Microsoft’s monthly non-security preview channel serves as a staging ground for features and quality improvements destined for the next Patch Tuesday rollup. KB5064081 is no exception; it targets Windows 11 24H2 and rolls up months of Insider testing into a build that will eventually become mandatory. The update lands as an optional download, meaning users must manually trigger the install from Windows Update or the Microsoft Update Catalog. Once applied, the combined SSU+LCU becomes a permanent fixture on the system—uninstalling the LCU does not remove the SSU, so rollbacks require careful preparation with full system images or DISM commands.

This release is particularly notable for its breadth: it touches Recall, Click to Do, File Explorer, Task Manager, Windows Hello, the taskbar, lock screen, widgets, and Settings. It also removes PowerShell 2.0 as a default component and squashes dozens of bugs. However, most of the headlining AI capabilities are server-side gated, meaning they will appear gradually on eligible devices over the coming weeks rather than flip on instantly for everyone who installs the update.

AI Features Rolling Out Gradually

Microsoft has embedded the necessary code for several AI-driven capabilities into the operating system, but feature enablement is controlled by cloud-side switches. This means two machines running the same build may show different feature sets, depending on region, hardware, and licensing. The strategy reduces the blast radius if a feature misbehaves, but it complicates deployment planning and user support.

Recall Gets a Personalized Homepage

Recall—the on-device snapshot search tool that stirred privacy debates—receives its most significant interface revamp yet. After turning on snapshot collection (which remains opt‑in), a redesigned homepage now surfaces Recent Snapshots, Top Apps and Websites from the past 24 hours, and a persistent left navigation bar with quick links to Home, Timeline, Feedback, and Settings. The goal is to make task resumption faster and more intuitive. Snapshots can be filtered in Settings to exclude specific apps or websites, and the entire feature can be paused or reset at any time. Recall requires a Copilot+ PC with a compatible NPU and enough storage to host the local index.

Click to Do Gains an Interactive Tutorial

Click to Do—Microsoft’s contextual menu for AI actions on selected text or images—now launches with a short interactive tutorial the first time it’s accessed. The tutorial demonstrates summarization, background removal, text extraction, and other quick edits directly on sample content. Users can relaunch the tutorial later from the app’s overflow menu. Like Recall, full Click to Do functionality is tied to Copilot+ hardware and may also depend on Microsoft 365 licenses for cloud-backed tasks.

File Explorer Integrates AI Actions and Activity Indicators

File Explorer’s right‑click context menu grows a new set of on‑device AI image editing options: Blur Background, Remove Background, and Erase Objects. These leverage local NPUs to process photos without uploading them. A Summarize action appears for documents, but it typically requires a Copilot or Microsoft 365 entitlement when cloud processing is involved. For work and school accounts signed in via Entra ID, the Home and Activity columns now display people icons and live persona cards, making collaboration history more visible.

Task Manager CPU Reporting Finally Fixed

One of the most celebrated fixes in KB5064081 addresses a long‑standing inconsistency in Task Manager. Previously, the Processes, Performance, and Users pages could report wildly different CPU utilization because they used non‑standard metrics that didn’t account for modern processor behaviors like turbo frequencies or heterogeneous cores. With this update, Task Manager adopts the same standard workload metrics used by third‑party tools, bringing consistency across all pages. For those who preferred the old “Processor Utility” numbers, a new optional CPU Utility column appears in the Details tab. This change eliminates misleading 100% readings and gives administrators a reliable view of system load during quick triage.

Windows Hello and Passkey Experience Modernized

The Windows Hello sign‑in UI gets a comprehensive visual refresh. The new interface streamlines the credential picker, making it easier to switch between passkeys, PINs, and connected devices like phones. The redesign appears consistently across the login screen, passkey dialogs, Recall prompts, and the Microsoft Store. Under the hood, facial recognition and fingerprint login after standby are more robust, addressing reported failures where Windows Hello would successfully detect a face but still fall back to a PIN prompt.

UI Polish: Taskbar, Search, Lock Screen, and Widgets

KB5064081 sprinkles several smaller refinements across the shell. The taskbar’s notification center can now show a larger clock with seconds—a toggled setting under Time & Language > Date & Time. Search on the taskbar gains a grid view for image results and clearer status messages while the indexer is still cataloging files. A bug that could break taskbar thumbnail previews after an accidental drag gesture has been fixed.

Lock screen widgets, previously limited to Weather and a few other options in the EEA, expand to all regions. Users can add, remove, and rearrange widgets such as Stocks, Traffic, and Sports. The Widgets Board receives multiple dashboards and a redesigned Discover feed that incorporates Copilot‑curated stories and summaries from MSN publishers. These changes are also server‑side enabled and may take time to appear.

Settings: Privacy Controls for Generative AI and an Assistive Agent

A new page at Settings > Privacy & security > Text and Image Generation lists third‑party apps that have recently used Windows‑provided generative AI models. From this page, users can review and revoke per‑app permission to access on‑device AI capabilities—a welcome transparency measure as AI integration deepens. Meanwhile, the “agent in Settings” that first shipped on Snapdragon Copilot+ PCs now works on AMD and Intel‑powered Copilot+ devices when the display language is set to English. This natural‑language helper can surface relevant system settings in response to typed queries.

PowerShell 2.0 Bids Farewell

Starting with this update, Windows 11 24H2 no longer includes PowerShell 2.0 by default. The engine was deprecated in 2017 and has been superseded by PowerShell 5.1 and the cross‑platform PowerShell 7.x. While most modern scripts will be unaffected, enterprise environments that still rely on legacy remoting or modules built for PSv2 must audit and migrate their automation immediately. Microsoft’s phased removal means the component will vanish from fresh installs and eventually be stripped from upgraded systems over the following months.

Critical Stability and Platform Fixes

Beyond the feature work, KB5064081 delivers a raft of reliability improvements:
- IME crash: A bug causing the first character to vanish when typing Chinese with an IME after a copy operation is fixed.
- dbgcore.dll crashes: Underlying issues in dbgcore.dll that could crash explorer.exe and other apps are resolved.
- Kerberos: A crash when accessing cloud file shares via Kerberos is patched.
- Miracast audio: Audio no longer cuts out after a few seconds when casting to a TV on certain devices.
- Live captions: Opacity changes now take effect properly.
- Login blank screen: Several underlying cases that produced a white screen or “just a moment” hang during login are addressed.
- Audio service: The audio service is less likely to hang and stop playback.
- Hyper‑V: Unspecified Hyper‑V fixes are included.

Known Issues and Community Reports

No major security flaws accompany this preview, but a few known quirks and community‑reported regressions warrant attention:

Event ID 57 – CertEnroll: Microsoft had previously acknowledged spurious “Microsoft Pluton Cryptographic Provider” errors in Event Viewer. KB5064081 contains the fix, but it rolls out over several weeks. Administrators with SIEMs should filter or correlate Event ID 57 temporarily to avoid alert fatigue until the resolution fully propagates.

NDI streaming quality: Some users in production and streaming communities have reported degraded NDI performance after recent updates, particularly when using Display Capture in OBS Studio. While not universally reproducible, teams that rely on NDI should validate their workflows before deploying KB5064081 to production streaming rigs.

Peripheral and connectivity regressions: A small fraction of community posts mention Wi‑Fi disappearance, toolbar unresponsiveness, or other peripheral issues after installing preview updates. These remain anecdotal and not confirmed by Microsoft, but they underscore the need for pilot testing on diverse hardware.

Feature gating and licensing surprises: The AI features in this update are not universally available. Copilot+ hardware (Snapdragon X, AMD Ryzen AI 300, Intel Core Ultra 200V) is required for local AI processing, and some actions like “Summarize” in File Explorer may need a Microsoft 365 Copilot license. IT departments must inventory hardware and licensing before promising the full feature set to users.

Deployment Guidance: A Measured Approach

KB5064081 is a preview—not a Patch Tuesday security update—so organizations should resist the urge to push it broadly without validation. Here is a practical checklist:

  1. Pilot scope: Assemble a test group covering major OEM models, driver variations, and at least one Copilot+ device if AI features will be used.
  2. Pre‑install checks: Create full system images and inventory scripts for PowerShell 2.0 dependencies.
  3. Critical workflow validation: Test Windows Hello sign‑in, SSO/conditional access, network streaming (especially NDI), printing, Miracast, backup/restore paths, and line‑of‑business apps.
  4. Monitor telemetry: Track explorer.exe and dbgcore.dll crash rates, audio/Miracast behavior, Wi‑Fi stability, and Task Manager CPU accuracy. Set up temporary Event ID 57 filters.
  5. Rollout cadence: Expand from pilot to broader rings with 1–2 weeks between waves. Keep a “validation” ring for last‑minute checks. Maintain the ability to pause or rollback via DISM or image recovery.
  6. User communication: Inform users that features will appear gradually and that the Notification Center clock with seconds is optional. Provide helpdesk contacts for issues.

Critical Analysis: Strengths, Trade‑offs, and Risks

Strengths: The Task Manager CPU fix alone makes this update worthwhile for power users and IT pros. The Windows Hello redesign streamlines authentication, and the expansion of lock screen widgets adds practical personalization. The AI code landing in the OS is a necessary step for future Copilot+ experiences, and the accompanying privacy controls in Settings are a responsible move.

Trade‑offs and risks: The combined SSU+LCU packaging increases rollback complexity—organizations that aggressively stage updates must have robust image‑based recovery plans. Server‑side feature gating, while safer, creates unpredictability: two machines with the same build may behave differently, complicating documentation and support. The AI features’ reliance on Copilot+ hardware and M365 licensing could lead to user frustration if expectations aren’t managed. Community‑reported regressions, though rare, reinforce that preview builds should not land on mission‑critical endpoints until validated in the organization’s own environment.

Recommendations

  • IT administrators: Delay broad production deployment. Pilot KB5064081 on representative hardware, validate mission‑critical workflows, and keep a tested rollback image. Audit PowerShell 2.0 dependencies now.
  • Enthusiasts and power users: Install on a non‑critical device to explore Recall, Click to Do, and File Explorer AI. Back up your system first and expect staged feature appearance.
  • Streaming professionals: Test NDI thoroughly before trusting this update to production streaming setups; consider staying on the current general‑availability build if stability is paramount.
  • Everyone: Monitor Event Viewer for the known Event ID 57 noise and apply the recommended filters until the fix completes its rollout.

KB5064081 represents a turning point for Windows 11: it delivers the platform components that will bring AI directly into the shell, corrects a glaring Task Manager flaw that has irritated users for years, and polishes dozens of everyday interactions. The staged rollout strategy mutes immediate risk but demands pragmatic validation from anyone responsible for a fleet or a critical workstation. As the AI features light up over the coming weeks, the update’s true impact will become clearer—and so will the readiness of Windows 11 to serve as the hub for a new generation of on‑device intelligence.