KB5127653 (Build 28000.3365) for Windows 11 26H1 drops as part of the November 2026 update (preview)

Windows 11 build 28000.3351 (KB5127653) arrives as an optional install in the Stable channel for version 26H1 on October 28, 2026.
The update adds Emoji 17.0, a Tips widget, Copilot key remapping, new touchpad gestures, and an accessibility setting to automatically maximize apps.
File Explorer, desktop personalization, Bluetooth, Settings, and Windows Recovery Environment receive usability and reliability improvements.
Additional fixes address Remote Desktop connection errors, BitLocker PIN handling, power reporting, and Manitoba’s upcoming time zone change.

Microsoft has made Windows 11 build 28000.3365 (KB5127653) available as an optional install for version 26H1 on October 28, 2026. The update introduces new features, usability improvements, and reliability fixes.

According to the changelog, this release for Windows 11 improves File Explorer, adds support for Emoji 17.0, introduces a “Tips” widget, refreshes the Magnifier toolbar, adds new touchpad gestures, and lets users remap the Copilot key to Right Ctrl or the Context Menu key.

The update also expands accessibility and personalization options, adds Camera Roll Backup through OneDrive, and improves Bluetooth, Settings, and Windows Recovery Environment (WinRE). New features include a restore summary for Windows settings backups, a new Administrator protection control, and faster Microsoft Edge launches.

Additional fixes address Remote Desktop, Always On VPN, audio playback on certain AMD graphics cards, WSL2 virtualization, and other system reliability issues.

If you want to keep up with every Windows release, including Insider Preview builds and cumulative updates, the Windows Build Tracker has the full timeline.

Windows 11 26H1 is not a version for current devices. Microsoft has explicitly stated that version 26H1 is not an upgrade path for Windows 11 25H2 or earlier releases.

According to the company’s newly published Microsoft Health Dashboard page, version 26H1 is a hardware-optimized release designed to enable next-generation silicon developed in partnership with device manufacturers and silicon partners. This release will be available exclusively as a preinstalled experience on select new devices beginning in early 2026, with capabilities tailored specifically for those platforms.

Microsoft is referring to the new ARM64 PCs, starting with devices powered by the Snapdragon X2 Plus, Elite, and Extreme processors. If you own a computer running on Intel or AMD hardware, Windows 11 26H1 will never be offered to your system.

What’s new on Windows 11 26H1 build 28000.3351
Windows 11 October 2026 Patch Tuesday – Manual installation process
Windows 11 October 2026 Patch Tuesday – Update history

Important: Usually, Microsoft doesn’t release new features immediately. When a feature is announced as part of an update, it usually signals the start of a gradual rollout using the Controlled Feature Rollout (CFR) technology. Availability can vary based on region, hardware, and software configuration. For instance, some features take longer to reach users in Europe due to regulatory requirements.

What’s new on Windows 11 26H1 build 28000.3351

Microsoft is gradually rolling out new features and improvements with Windows 11 build 28000.3351 for version 26H1. Since these changes are part of a controlled rollout, availability may vary depending on the device configuration.

File Explorer

This update brings several usability improvements to File Explorer, starting with better handling of downloaded files. HTML files now include a “Preview anyway” button that lets you acknowledge the warning and view the file, while non-HTML files, including PDFs, are previewed automatically.

The “Home” page also remembers which sections you expanded or collapsed, so you can come back without setting everything up again. Microsoft has improved the reliability of thumbnail previews for cloud files in the “Details” pane and reorganized the pane to make file properties easier to find.

Finally, an issue that could erase the address bar contents when you click near its right side to enter edit mode has been fixed.

New Tips widget

This update introduces a Tips widget that provides short, helpful guidance on Windows features.

To try it, open the Widgets board, select “Add widgets,” and choose “Tips.” You can also add it to your lock screen in Settings > Personalization > Lock screen, so you can access helpful Windows 11 tips without opening the desktop.

Desktop personalization improvements

Windows 11 makes desktop customization more reliable, with improvements to the Personalization > Background page in Settings, higher-resolution wallpaper previews, and better preview display on portrait monitors.

The update also improves slideshow transitions on newly created accounts and the handling of rapid wallpaper changes.

You can now use DIB image files as desktop backgrounds and keep slideshow wallpapers enabled across multiple desktops without the system automatically switching the setting back to Picture.

Bluetooth gets reliability and audio fixes

Bluetooth receives a broad set of improvements to make wireless accessories more reliable. For example, during voice calls, adjusting the volume on a Bluetooth Classic Audio accessory now displays the Windows shell volume flyout, providing visual feedback.

The operating system also reports disconnected accessories more accurately, improves the stability of the “Bluetooth & devices” page in Settings, and fixes an issue where the Bluetooth radio could be off while its Settings toggle still appeared on.

The update also improves Bluetooth audio stability and compatibility, adds microphone support for certain Bluetooth Classic Audio accessories, and improves the reliability and performance of LE Audio devices and shared audio.

It also fixes a crash (error code 0x139) that could occur while streaming Bluetooth audio.

Settings improves app details and controls

The Settings app also gets several improvements. For example, the “Printers & scanners” page gains reliability improvements, while Settings > Apps > Installed apps now displays version numbers at the top level for packaged apps, matching the behavior already available for other apps.

Time pickers also better respect your preferred 12-hour or 24-hour format when configuring active hours or scheduling Night light.

Finally, the Allow multiple apps to use camera at the same time option under Settings > Bluetooth & devices > Camera now retains its setting more reliably.

Touchpads gain new scrolling gestures

Precision touchpads gain two new gesture controls under Settings > Bluetooth & devices > Touchpad. Single-finger scrolling lets you scroll vertically with one finger from either edge of the touchpad, while Automatic scrolling keeps content moving without lifting your finger as you move it near the edge.

Copilot key becomes customizable

A new Windows 11 setting lets you remap the Copilot key to act as either Right Ctrl or the Context Menu key.

This gives you more control over your keyboard and helps preserve familiar shortcuts and accessibility workflows without changing how you work.

Camera Roll Backup integrates with OneDrive

Windows 11 adds Camera Roll Backup in the Settings app, giving eligible users another way to protect photos with OneDrive.

You can start setup from the Home page or Accounts section. The process uses a QR code to continue setup on your mobile phone.

Microsoft notes that feature availability depends on the device or market.

Administrator protection gains a new control

The Windows team is adding a new way to enable Administrator Protection directly from Windows Security.

The new control appears under Windows Security > Account Protection. When the option becomes available, you can turn on the “Administrator Protection” toggle and restart your device to activate the feature.

Administrator protection settings

The company is rolling out this experience gradually over the coming months, so the toggle might not appear on every device immediately.

Power and battery reporting gets a fix

Plugged-in laptops receive a fix for scenarios where the system incorrectly detects a switch from AC power to battery power.

The change improves how power status is displayed and helps prevent performance issues caused by this incorrect detection.

WinRE improves recovery and remote management

Windows Recovery Environment (WinRE) can now automatically reuse eligible Wi-Fi profiles saved in your current operating system installation, including supported certificate-based networks.

This allows devices to connect to the internet during recovery scenarios, such as Quick Machine Recovery or Cloud Rebuild, without requiring Wi-Fi credentials to be preconfigured in WinRE. The feature is enabled by default, but IT administrators can disable it.

The update also introduces a recovery remote management plug-in that extends WinRE management capabilities for mobile device management (MDM) providers, giving IT teams additional options for managing recovery environments.

System settings backup adds a restore summary

Windows 11 introduces a Restore Summary screen that appears after restoring a backup profile to a new device.

The summary shows which items were restored successfully, including system settings and the list of Microsoft Store apps. This makes it easier to review the results and verify what was transferred when setting up a new computer.

Data Protection API warns about an upcoming change

Microsoft is introducing a warning before prompt-based protect and unprotect operations that use the Data Protection API (DPAPI).

The warning explains that Microsoft will retire the prompt-based experience in April 2027. The company recommends avoiding new prompt-protected data, switching to a supported non-interactive protection method, and decrypting or migrating existing prompt-protected data before the retirement date.

DPAPI operations that don’t use the prompt-based method are unaffected.

Kiosk mode restricts additional keyboard shortcuts

Windows 11 disables more keyboard shortcuts in kiosk environments to help maintain their restricted experience. The “Windows key + Tab” shortcut is now disabled in restricted user experience kiosk mode, while “Windows key + A” and “Windows key + C” are disabled in single-app kiosk mode.

Accessibility adds automatic window maximization

A new “Open apps maximized” setting automatically opens app windows maximized, reducing extra steps for people using screen readers, magnification, or tablet mode, and for anyone who prefers a consistent full-screen workspace.

You can enable it under Settings > Accessibility > Visual effects. The update also improves keyboard, gamepad, or Narrator navigation of the Bluetooth Quick Settings page.

Magnifier gets a visual refresh

The Magnifier toolbar receives a cleaner look, with updated icons that better match Windows 11’s design and more consistent spacing and padding for a polished layout.

The changes are purely visual, so views, zoom controls, keyboard shortcuts, and Read Aloud continue to work as before.

Emoji 17.0 adds new designs

Windows 11 adds support for Emoji 17.0, bringing new options such as distorted face, fight cloud, and hairy creature.

Microsoft also refined existing designs, including saluting face, face with peeking eye, goose, lotus, and kissing cat, for better cross-platform consistency.

Ebrima font expands script support

The Ebrima font now supports the Garay and Beria Erfe scripts, making it the first Microsoft font to support both.

Garay was encoded in Unicode 16.0, while Beria Erfe was added in Unicode 17.0. Microsoft has also refined Ebrima’s Adlam glyph designs to align with the current Unicode standard and improve consistency.

Windows PowerShell receives updated names

This update adds version 5.1 to the names of Windows PowerShell and Windows PowerShell Integrated Scripting Environment (ISE).

On existing devices, some Start menu shortcuts might retain their previous names after installing the update. This change affects the displayed names, not the PowerShell version.

Microsoft Edge launches faster

Windows 11 build 28000.3365 introduces Accelerated App Launch for Microsoft Edge, a feature designed to make the browser open faster and more consistently, especially when the computer is busy or under heavy load.

The feature optimizes how Windows launches Edge when the browser is already running in the background, reducing delays when opening a link or launching the browser from the Taskbar or Start menu.

Accelerated App Launch is available on Windows 11 versions 25H2, 26H2, and 26H1, but requires Microsoft Edge version 150 or later.

Other fixes

This update includes a broad set of reliability improvements and small changes across Windows 11:

Remote Desktop: Fixes an issue that prevented non-admin users from connecting to remote devices with Administrator Protection enabled. Connections could fail with error 0xC000000D and the message, “The token that was passed to the function is invalid.” The update also fixes an issue that prevented the “Specify thumbprints of certificates representing trusted .rdp publishers” policy from being configured through Microsoft Intune.
Always On VPN: Fixes connection problems that began after installing the September security update. When automatic protocol selection or protocol fallback was configured, VPN connections could remain stuck in the Connecting state or fail after an initial connection attempt. Subsequent attempts could also display the “The specified port is already in use” error.
Time and date: Adds the new Manitoba Standard Time zone, “(UTC-05:00) Manitoba,” and enables permanent daylight saving time support for British Columbia and Alberta starting in November 2026.
BitLocker: Improves pre-boot PIN retry handling to prevent unintended repeated submissions from triggering a TPM dictionary-attack lockout and requiring recovery.
Application Control: Fixes an issue that could prevent a device from starting after using the PS_UpdateAndCompareCIPolicy CIM method.
Audio: Fixes an issue that could prevent HDMI and DisplayPort audio playback on certain AMD graphics cards.
Certificates: Fixes an issue that could cause TPM attestation identity key certificate enrollment to stop responding when a non-Microsoft cryptography key storage provider reported a malformed algorithm name or failed during provider enumeration.
WSL2: Fixes an issue that could prevent nested virtualization from working in WSL2 on devices with AMD processors.
Servicing stack: Includes KB5133111, build 28000.3354, which improves the reliability of the Windows update installation process.

In addition, the company is still working on a problem affecting some USB Audio Class 1.0 devices after installing the September 8, 2026, Windows security update.

Affected devices might fail to start, display error Code 10 in Device Manager, produce no audio, or have unresponsive volume controls and sound settings. The issue affects only USB Audio Class 1.0 devices.

Microsoft has not provided a resolution yet and says it will update the release notes when more information becomes available.

Windows 11 November 2026 Patch Tuesday – Manual installation process

Since there’s always a chance of problems during and after applying a quality update, it’s recommended to prepare your computer by creating a restore point and a full backup before proceeding with the installation.

To download and install this Windows 11 update, open the “Windows Update” settings, and from the Windows Insider Program settings, enroll the device in the Release Preview channel, and click the “Check for Updates” button from the main update settings page.

If your computer has issues after installing this package, follow these instructions to uninstall the November 2026 update. If you’re unable to uninstall the update, follow these steps to recover your device.

Why the October preview becomes the November update

Microsoft develops Windows updates in stages, which can make release dates and naming confusing. Changes for a monthly update typically appear in the Release Preview channel the month before the update’s final release. Microsoft then releases the changes as an optional, non-security update in the Stable Channel, usually near the end of that month, before including them in the following month’s Patch Tuesday update.

For example, the changes previewed in October 2026 are intended for the November 2026 update. Microsoft first tests them in the Release Preview channel, then makes them available as an optional update in the Stable Channel, and finally includes them in the November 10 Patch Tuesday update. The final release can also include additional fixes and security updates.

In other words, the month a feature appears in a preview does not necessarily match the month of its final release. The October preview is an early look at changes intended for the November update.

Windows 11 November 2026 Patch Tuesday – Update history

Initial Release – Patch Tuesday (Release Preview):
- Windows 11 26H1 build 28000.3351 release date: October 16, 2026. Official notes.
Final Release – Patch Tuesday (General Availability):
- Windows 11 26H1 build 28000.3365 release date: October 28, 2026. Official notes.
Final Release – Patch Tuesday (General Availability):
- Windows 11 26H1 build 28000.xxxx release date: November 10, 2026. Official notes.