Windows 11 KB5083631 Preview Adds Batch-File Security Changes and Secure Boot Updates

· Original article ↗

Summary

Microsoft’s optional Windows 11 KB5083631 preview adds a batch-file processing mode, expands the phased Secure Boot certificate rollout, and may trigger BitLocker recovery on some Windows Server 2025 devices.

Key points

  • KB5083631 is an optional, non-security preview update for Windows 11 versions 24H2 and 25H2.
  • Administrators can enable a batch-file processing mode designed to prevent batch files from changing during execution.
  • The update adds device-targeting data to expand the phased rollout of replacement Secure Boot certificates.
  • Some Windows Server 2025 devices with an unrecommended BitLocker Group Policy configuration may require a recovery key after the first restart following installation.
  • Kerberos authentication for Remote Desktop sessions using Remote Credential Guard is improved to address error 0xc000009a.
  • Windows Security event logging now includes the affected application name for CVE-2024-30098.

Article Details

Event Type
Release of the optional Windows 11 KB5083631 preview update
Impact
The non-security update includes 34 quality improvements, including a full-screen Xbox mode, improved startup app performance, and a more secure batch-file processing mode. Updated Secure Boot certificates are also rolling out. Some Windows Server 2025 devices with certain BitLocker Group Policy settings may enter BitLocker recovery on the first restart after installation. The update also improves event logging related to CVE-2024-30098.

Vendors

Products

Related Articles