IT Home, October 29: Microsoft yesterday (October 28) rolled out the October optional update KB5127936 to Windows 11 25H2 and 26H2 users, upgrading the build numbers to 26200.9818 and 26300.9818.
IT之家's translation of the official changelog is as follows:
I. Gradually roll out updates
1.1 Right-click menu in File Explorer
Microsoft has launched a redesigned right-click menu, calling it faster, cleaner, and more customizable. The menu opens significantly quicker, reduces visual clutter, and offers better control over the commands and third-party app extensions displayed when right-clicking.
Users can now deeply customize the right-click menu. Click the "Customize Menu" button at the bottom of the right-click menu to open the dedicated customization section in "Settings," where users can:
- Enable or disable Windows built-in commands, such as "Send to" and "Create shortcut";
- Add additional commands to the main right-click menu, such as "Print";
- Choose which app extensions appear in the main menu or submenu, or hide the app extension submenu entirely;
- Display the cut, copy, paste, rename, delete, and share commands as classic text instead of an icon bar at the top;
- Move the "Attributes" item to the bottom of the right-click menu.
To customize the right-click menu, simply right-click anywhere, select "Customize Menu," and then specify the desired commands, app extensions, and item layout. No additional steps are required if you prefer the default configuration. To open the classic right-click menu with all available options, hold down the Shift key while right-clicking.
1.2 File Explorer
Key file information on the File Explorer search results page—including name, location, and modification date—is now displayed in a single, structured view for more intuitive analysis of search results.
The file explorer address bar now supports the tilde character "~", allowing users to quickly navigate to the current user's profile folder and its subdirectories, such as "~AppData".
The Folder Options dialog box now fully supports dark theme.
1.3 XBOX Mode
Microsoft has introduced a new Game Task View interface in Xbox mode, adding a navigation bar that allows users to quickly access "Exit to Desktop" and device power options. Microsoft states that this update makes it easier for players to perform essential system operations while gaming.
1.4 Settings
The Windows Settings app has improved the "Privacy and Security" section, making it easier for users to locate privacy controls for the "Camera," "Microphone," and "Location" sub-sections. Relevant controls are now centralized on a single page, with usage information pulled from deeper sub-pages.
The "Device details" card is located on the Settings homepage and was initially introduced in the KB5079391 update in March 2026; it is now available in additional countries and regions. This card is displayed only to users signed in with a Microsoft account and provides a summary of key computer specifications and usage options. Full device specifications can still be viewed under Settings > System > About.
Subtle visual adjustments have been made to the temporary files page in “Settings” > “System” > “Memory”.
1.5 Phone Link
Users can now hover over recent messages or notifications in the "Recently Used" section to view a content preview directly in the Start menu without opening the item. This feature can be controlled under "Connect to Phone" > "Settings" > "Personalize Start Menu".
1.6 Taskbar
Microsoft has improved the smoothness of the animation for pop-up thumbnails when moving the mouse cursor between taskbar application icons.
The taskbar settings save mechanism has also been optimized for multi-monitor setups that frequently connect and disconnect external displays.
1.7 Screen Magnifier
The magnifier has added a contrast theme toggle to quickly reduce screen glare without distorting the original colors of photos, videos, and charts. This toggle is enabled by default with the dark contrast theme and is located on the magnifier toolbar. Users can select other themes under "Settings" > "Accessibility" > "Magnifier." The color inversion feature remains available and is not a replacement for color inversion.
Microsoft has also added independent scaling support for each monitor. Now, each monitor can use its own scaling level, keeping zoomed areas confined within the physical boundaries of the respective screen. To enable this feature, set the display mode to "Extend" in Settings > System > Display.
Additionally, Microsoft has implemented viewport locking for multi-monitor setups with split-screen scaling enabled. This feature keeps the zoomed area fixed on one monitor when the cursor moves to an adjacent monitor, while the locked screen remains interactive. To lock or unlock the area, hover over the monitor and press Ctrl+Win+K.
1.8 Real-time Subtitles
Added a new setting, "Enable Screen Reader Audio," which is disabled by default. When disabled, live captions will not transcribe speech from screen readers (such as Narrator, JAWS, and NVDA), and will only use the microphone and system audio. Users can enable this setting under "Settings" > "Accessibility" > "Captions."
1.9 Narrator
Added support for reading and step-by-step navigation of mathematical expressions in Microsoft 365 applications, including Word and PowerPoint, as well as in Microsoft Edge (version 153.0.4234.32 and later) and Google Chrome (version 153.0.8010.18 and later) web pages. Microsoft states this will make it easier for users with visual impairments to work with formulas, equations, and scientific notation.
1.10 Home Security
Microsoft has improved the message displayed when an app is blocked due to age restrictions set by parental controls in the Family Safety feature.
1.11 Recovery
Added support for WinRE network functionality, allowing the Windows Recovery Environment to automatically reuse applicable Wi-Fi profiles saved in the main Windows operating system, including supported certificate-based Wi-Fi networks.
Previously, WinRE could only automatically connect to wired, unauthenticated Ethernet or Wi-Fi networks preconfigured for WinRE; for other WPA2/3 networks, users had to manually connect and enter the password.
After this update, WinRE can use saved Wi-Fi profile information when a network connection is required during the recovery process. This enables devices to automatically connect to the internet in scenarios such as rapid PC recovery or cloud rebuild, without requiring users or IT administrators to manually pre-configure Wi-Fi credentials in WinRE. This feature is enabled by default and can be disabled by IT administrators as needed.
1.12 Cloud Reconstruction
Microsoft has introduced the Cloud Rebuild feature. This new recovery function restores a Windows 11 PC to a known good state by completely reinstalling the operating system, even if Windows fails to boot.
Unlike "Reset this PC," Cloud Recovery downloads the target Windows image and device drivers directly from Windows Update, allowing you to restore your device to a fully functional state without requiring a USB drive, custom images, or reliance on features of the currently installed operating system.
The cloud reconstruction feature includes:
- Initiate cloud recovery from within the running operating system: Go to "Settings" > "System" > "Recovery," then click "Reset this PC." The computer will automatically restart into WinRE and launch the cloud recovery wizard;
- If the operating system fails to start, the computer will automatically enter WinRE after multiple failed boot attempts. From the menu, select "Troubleshoot" > "Reset and Remove" > "Cloud Recovery";
- Connect the device to the internet via Ethernet or Wi-Fi, verify the target Windows version, build number, and language, then confirm the warning regarding data deletion. Next, select the desired disk preparation method—either standard file deletion or permanent data erasure—and confirm the reinstallation of the operating system;
- Disk Erasure: Before reinstalling Windows, you can now choose between standard file deletion or secure, permanent data erasure using hardware-based disk controller erase commands. The hardware erasure process is irreversible;
- Remote Management: IT administrators can now remotely restore CSP configurations and run Cloud Rebuild, using either the currently installed version or a specified target version.
1.13 Backup and Restore
Added a summary of the restore process. This feature appears after applying a configuration backup to a new device, clearly showing which data has been successfully transferred, including Windows settings and the Microsoft Store app list. Microsoft states that this enhances transparency during configuration transfer between devices, allowing users to immediately verify restore results and proceed with system setup.
1.14 Application Management
The group policy-based removal of preinstalled apps now fully supports multi-session environments. IT administrators can centrally manage the removal of standard apps on Windows 11 Enterprise and Education devices running in multi-user mode.
1.15 Adaptive Sleep Strategy
The updated adaptive sleep strategy increases the frequency of immediate wake-ups from modern standby and improves energy savings at low battery levels. Significant changes include: reduced sleep frequency when battery level is above 80%, and earlier sleep initiation when battery level drops below 10%.
1.16 Security
Memory Integrity Protection will be automatically enabled on more compatible devices running Windows 11. Microsoft states that Windows may enable Memory Integrity Protection (HVCI) during upgrades on supported PCs to enhance security and prepare devices for Windows' advanced security features. Current user and IT administrator settings will be preserved; for example, if Memory Integrity Protection was previously manually disabled, the system will not re-enable it.
1.17 IPv6 Network Functionality
Windows now includes built-in support for the IPv6 CLAT protocol, available for both wireless (Wi-Fi) and wired (Ethernet) network interfaces, and supports client-side 464XLAT translation. This enables IPv4-only applications to seamlessly access IPv4 network resources from IPv6-only networks. Microsoft states that this change will accelerate the transition of enterprise network infrastructure to pure IPv6 while eliminating the risk of losing existing software functionality.
1.18 Data Protection API (DPAPI)
The system has issued a warning for encryption and decryption operations that rely on interactive user confirmation prompts. This message informs users that this interactive mechanism will be discontinued on April 2027. Developers must cease creating data protected in this manner before this deadline, migrate to modern non-interactive protection schemes, and decrypt or migrate existing datasets. Standard DPAPI operations that do not use interface confirmation prompts will continue to function normally without any changes.
1.19 Windows Spotlight
Microsoft has optimized its internal infrastructure to improve the stability of background image loading and updates for the Windows Spotlight service on the lock screen.
1.20 Un token issuance
Windows has updated its text formatting support for Unicode 17.0, enabling the operating system to correctly display and generate new encoded characters and scripts. Unicode 17.0 adds 4,803 new characters, including support for four new scripts: Beria Erfe, Sidetic, Tai Yo, and Tolong Siki.
Two: Available to all users
2.1 Microsoft Edge
Microsoft has implemented a faster app launch mechanism to improve Microsoft Edge's speed. When users click a link or launch Edge from the taskbar or Start menu, if a browser process is already running in the background, Windows immediately directs the request to the existing instance without creating an additional intermediate process. Microsoft says this reduces system latency and enhances browser responsiveness during intensive multitasking.
Microsoft stated that this mechanism is the first phase of integrating the universal Windows system service, which will allow any third-party application in the future to use the service to accelerate startup times.
2.2 Application Management
The group policy-based removal of preinstalled apps now fully supports multi-session environments. IT administrators can centrally manage the removal of standard apps on Windows 11 Enterprise and Education devices running in multi-user mode.
2.3 Remote Desktop
Fixed an issue where users without administrator privileges were unable to establish Remote Desktop connections after administrator protection was enabled. Connections may fail with error code 0xC000000D, indicating "The token passed to the function is invalid."
Microsoft also fixed an issue that prevented the configuration of the "Specify certificate fingerprints of trusted RDP issuers" group policy via the Microsoft Intune dashboard.
2.4 Smart Application Control
Fixed an issue where the Smart App Control toggle in Windows Security would be grayed out, preventing re-enabling after being disabled.
2.5 Windows PowerShell
The names of Windows PowerShell and the Windows PowerShell Integrated Scripting Environment (ISE) have been updated to reflect version 5.1. On devices previously configured, some shortcuts in the Start menu may retain their original names after installing the update.
2.6 Sound
Fixed an issue where audio might not play through HDMI and DisplayPort connections on certain AMD graphics cards.
2.7 Application Control
Fixed an issue that could prevent the operating system from booting after executing the CIM method PS_UpdateAndCompareCIPolicy.
2.8 Certificate
Resolved an issue where the TPM attestation identity key (AIK) certificate registration process became unresponsive when a third-party CNG key store provider reported an incorrect algorithm name or failed during provider enumeration.
2.9 Windows Sandbox
Fixed an issue where Windows Sandbox might unexpectedly exit with error code 0x80370106 during use.
2.10 BitLocker
Improved handling of incorrect PIN entry attempts before BitLocker startup to prevent locking and entering recovery mode due to triggered brute-force password protection.
2.11 Smart Card
The Windows Smart Card mini-driver has been updated to support RSA-3072 keys for compatible Personal Identity Verification (PIV) smart cards.
2.12 Windows Subsystem for Linux (WSL)
Fixed an issue where Windows Subsystem for Linux 2 (WSL2) on AMD-based systems might not support nested virtualization.