KB5087420:[Enterprise State Roaming (ESR)] ESR can now be managed through Windows Backup

May 12, 2026—KB5087420 (OS Build 22631.7079)

Improvements
This update addresses security issues for your Windows operating system.

This security update contains fixes and quality improvements from KB5082052 (released April 14, 2026). The following summary outlines key issues addressed by this update. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.

• [Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals, maintaining a controlled and phased rollout. ​​​​​​​
• [Country and Operator Settings Asset (COSA)] This update brings profiles up to date for certain mobile operators.
• [Daylight saving time (DST)] This update supports the 2023 DST change for the Arab Republic of Egypt.
• [Enterprise State Roaming (ESR)] ESR can now be managed through Windows Backup for Organizations policies. This makes setup easier for IT administrators. To learn more, see Enterprise State Roaming.
• [Microsoft Defender SmartScreen] This update enables Microsoft Defender SmartScreen in the Windows shell to send file hashes for unsigned files. This support allows SmartScreen to use newer reputation models and improves the quality of application reputation checks.
• Remote Desktop (known issue)] Fixed: This update addresses an issue that affects the Remote Desktop Connection security warning dialog. The dialog could render incorrectly in multi-monitor scenario when the monitors had different scaling set. This might occur after installing the April 2026 (KB5082052) security update. For more information, see Understanding security warnings when opening Remote Desktop (RDP) files.