Windows 11 KB5120998 Upgrades Windows Security With Autopilot Device Preparation GA and MXC Isolation

The optional preview update for Windows 11 version 24H2 and 25H2 has been released under KB5120998, bringing several improvements and fixes. First of all, the update improves the Taskbar, Start menu experience and introduced a few other changes.

Microsoft expands Windows Protection With Autopilot Device Preparation GA and MXC Isolation

Microsoft has also introduced Windows Autopilot device association, helping organizations identify trusted devices before enrollment. But that’s not all; KB5120998 adds Process Isolation for Microsoft Execution Containers, targeting workloads such as coding agents and model-generated code. The update also brings preview support for tagging agentic processes, allowing authorized components to assign an agent identifier to processes.

On the security side, ML-KEM can now work as a standalone post-quantum cryptography algorithm for TLS key exchange. Microsoft has also improved VPN-related recovery, Japanese WLAN reporting, Japanese IME reliability, and voice typing settings.

For everyday Windows users, the update includes improvements for Narrator Natural Voices, Japanese RemoteApp text input, classic Outlook search, and touchpad reliability. The update also confirms an important Windows change. WMIC is no longer available on Windows 11 versions 24H2 and 25H2 starting in August 2026.

That change affects only the WMIC utility. Windows Management Instrumentation remains supported. The good news is that Microsoft says it is not aware of any issues are currently linked with KB5120998.

Since this is an optional preview update, users can find it under Settings > Windows Update > Advanced options > Optional updates.