KB5055523: addresses an issue affecting machine password rotation in the Identity Update Manager certificate

April 8, 2025—KB5055523 (OS Build 26100.3775)

Improvements
This security update includes quality improvements. The following summary outlines key issues addressed by the KB update after you install it. Also, included are available new features. The bold text within the brackets indicates the item or area of the change.

• [IFilters] New! Windows Search runs IFilters in Less Privileged App Containers (LPAC). LPACs are like app containers, but they minimize permissions by default. Processes running in LPACs only access necessary resources and don’t have access to sensitive system components and data. This mitigates the damage from a compromised process.
• [Input Method Editor (IME)] New! After you install this update, the IME toolbar will hide when apps are in full screen mode. This only occurs when the IME toolbar is active, and you type Chinese or Japanese characters,
• [Narrator] New! Narrator scan mode now includes new functions. Skip past links (N) lets you navigate directly to text after a link, useful for long emails, articles, or wiki pages. Jump to lists (L) quickly accesses lists in web pages or documents. To use these features, turn on Narrator (Windows logo key + Ctrl + Enter), then activate scan mode with Caps lock + Spacebar. Scan mode is usually on by default on most web pages.
  - [Task Manager]

1. New! The Disconnect and Logoff dialogs now support dark mode and text scaling.
2. New! The Performance section now shows the type for each disk.
3. Fixed: When you select Automatically hide the taskbar, the search box appears as an icon rather than a search box.
4. Fixed: The Users page might cause Task Manager to stop responding when you use the keyboard. ​​​​​​​

• [Authentication] This update addresses an issue affecting machine password rotation in the Identity Update Manager certificate/Public Key Cryptography for Initial Authentication (PKNIT) path. This issue occurred particularly when Kerberos was used and Credential Guard was enabled, potentially causing user authentication problems. The feature Machine Accounts in Credential Gurad, which is dependent on password rotation via Kerberos, has also been disabled, until a permanent fix is made available.
• [Daylight Saving Time (DST)] Update for the Aysen region in Chile to support the government DST change order in 2025. For more info about DST changes, see the Daylight Saving Time & Time Zone Blog.
• [Deployment Image Servicing and Management (DISM)] Fixed: The StartComponentCleanup task doesn't work properly. It stops at 71% and shows error 6842.
• [JPG files] Fixed: You cannot use an API to find rotation information.
• [Mouse] Fixed: When using the show location pointer feature by pressing the CTRL key, the circles might appear small on some displays.
• [PcaUiArm] This update addresses an issue affecting the PcaUiArmUpdate feature, which results in unexpected behavior in specific scenarios.
• [PowerShell] Fixed: The Get-WindowsCapability command sometimes stops responding. Then you must restart your PC. ​​​​​​​
• [Windows Subsystem for Linux (WSL)] Fixed: It stops working and will not start up.
• [Windows Update] Fixed: When you install an update, you might get error 0x800f0905.
  ​​​​​​​​​​​​​​If you installed earlier updates, your device downloads and installs only the new updates contained in this package.

For more information about security vulnerabilities, see Security Update Guide and the April 2025 Security Updates.