Windows 11 KB5101684 Update Fixes File History and Office Apps

Windows 11 preview update KB5101684 is now available for versions 25H2 and 24H2, delivering fixes for Secure Boot, File Explorer, device management, and network backups.

The following changes from KB5101684 are part of the normal rollout and should become available to all supported devices.

Secure Boot certificate rollout expands

Microsoft added more device-targeting data to expand the deployment of new Secure Boot certificates.

Eligible consumer PCs and unmanaged business devices will receive the certificates automatically through Windows Update. Microsoft will continue the rollout over the coming months.

Office apps gain stability improvements

KB5101684 improves the stability of Microsoft Office applications running in virtualized environments.

Office apps should now operate and close more reliably under these configurations.

File Explorer fixes DFS mapped drive warnings

Microsoft fixed an issue affecting files stored on Distributed File System mapped drives.

Files could receive an incorrect Internet security classification when a PC started without a network connection and restored that connection later.

As a result, the Preview Pane could warn that a file might harm the computer. Copied files could also receive an unexpected Mark of the Web.

Microsoft fixes incorrect MDM compliance status

Newly provisioned or recovered devices running updates released on or after July 14, 2026, could remain incorrectly marked as noncompliant after enrolling in an MDM service such as Microsoft Intune.

This issue could block access to corporate resources. KB5101684 corrects the compliance status.

File History backups work with SMB shares again

Microsoft also fixed File History automatic backups to SMB network shares.

Windows could incorrectly report an “invalid credentials” error and prevent the backup from completing.

The update also improves File Explorer and Search and improves Windows Hello and Power settings.