- Microsoft is rolling out Windows 11 21H2 (build 22000.2538).
- The update is available for compatible devices as update KB5031358.
- This patch introduces several fixes and improvements.
Microsoft has released the Windows 11 build 22000.2538 as the update KB5031358. The update is available for download on version 21H2 with new changes, security fixes, and improvements.
According to the announcement on the official support website, the update now complies with the GB18030-2022 requirements, addresses problems regarding USB printers, Windows Defender Application Control, Microsoft Defender for Endpoint, OneDrive, fixes a memory leak, and more.
If you prefer manually installing the October 2023 update for version 21H2, download it from the Microsoft Update Catalog website.
Windows 11 21H2 update KB5031358
These are all the new features rolling out with the update KB5031358 for Windows 11 21H2:
- Completes the work to comply with the GB18030-2022 requirements. It removes and remaps characters for Microsoft Wubi input and Microsoft Pinyin U-mode input. You can no longer enter character codepoints that are not supported. All the required codepoints are up to date.
- Supports daylight saving time (DST) changes in Greenland.
- Changes the spelling of Ukraine’s capital from Kiev to Kyiv.
- Addresses an issue that affects account lockout event 4625. The format of the event is wrong in the ForwardedEvents log. This occurs when an account name is in the user principal name (UPN) format.
- Affects the Key Distribution Center (KDC) and user security identifiers (SID). KDC now reads the user SID from the Subject Alternative Name (SAN) of a certificate. Because of this, mobile device management (MDM) providers can use offline templates to fill in the user SID. To learn more, see KB5014754.
- Addresses an issue that is related to changes in the forwarding of events.
- Addresses an issue that affects XPath queries on FileHash and other binary fields. It stops them from matching values in event records.
- Addresses an issue that affects an Application Virtualization (App-V) environment. Copy operations within it stop working. This occurs after you install the April 2023 update.
- Addresses an issue that affects the Simple Certificate Enrollment Protocol (SCEP) certificate. The system reports some SCEP certificate installations as failed. Instead, the system should report them as pending.
- Addresses an issue that affects Microsoft Print to PDF. It uses the metadata for the name you sign in with as the author of a printed PDF. It should use the display name instead.
- Addresses an issue that affects some USB printers. Microsoft Defender stops them from printing.
- Addresses an issue that affects Windows Defender Application Control (WDAC). AppID Tagging policies might greatly increase how long it takes your device to start up.
- Addresses an issue that affects IMEPad. It stops working. This occurs when you enter end-user-defined characters (EUDC).
- Addresses an issue that affects application compatibility. It is related to Microsoft Defender for Endpoint.
- Addresses an issue that affects Remote Apps. The display of some elements is not aligned correctly.
- Addresses an issue that affects the Microsoft Distributed Transaction Coordinator (DTC). It has a handle leak. Because of this, the system runs out of memory.
- Addresses an issue that might make Windows stop responding. This might occur if you use Microsoft OneDrive files that are compressed by NTFS.
- Addresses an issue that might cause a user-mode memory leak. It might occur when you call CopyFile() or MoveFile().
- Addresses an issue that affects external binding. It fails. This occurs after you install Windows updates dated May 2023 or later. Because of this, there are issues that affect LDAP queries and authentication.
These fixes were previously available as a preview with the update KB5030301 (build 22000.2482), but starting October 10, 2023, the update is rolling out to everyone as update KB5031358 (build 22000.2538).
The new fixes and changes are now available for devices enrolled in the Stable Channel. The update will download and install automatically, but you can always force the update from Settings > Windows Update and click the “Check for updates” button. If you are still in the original version of Windows 11, you can use these instructions to upgrade to version 22H2.