Windows 10 KB5025221 is now available for everyone! This update is part of April 2023 cumulative updates for Windows, and it doesn’t change anything on the surface, but there are plenty of fixes. Microsoft has published download links for Windows 10 KB5023696 offline installers if you prefer manual installation over Windows Update.
Windows 10 KB5025221 is a security update, which means it will download and install automatically unless you’ve changed the Windows Update settings. It is worth noting that these ‘security’ updates do not contain exciting tweaks, so don’t expect any significant improvements in this release.
Microsoft officials confirmed a critical change in Windows 10’s April 2023 Update is related to printing functionality. The patch has fixed an issue that affects USB-based. The system accidentally detects USB printers as multimedia devices, which can be confusing as printers are not multimedia devices even though they are not.
This update is rolling out via Windows Update. To download, head to Settings > Updates & Security > Windows Update. Finally, click on the “Check for updates” button. If you’re on Windows 11, your PC has a different update. On 22H2 systems, Microsoft has published KB for Windows 11.
On Windows 10, you’ll see the following updates when you check for updates today:
2023-04 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5025221)
Or
2023-04 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5025221)
Download Links for Windows 10 KB5025221
Windows 10 KB5025221 Direct Download Links: 64-bit and 32-bit (x86).
KB5025221 (Build 19045.2728) Full Changelog
There are a lot of changes in April 2023 update for Windows 10. For example, Microsoft says the ms-appinstaller URI has been improved to work with the DesktopAppInstaller policy. Additionally, this update addresses various issues impacting system components’ performance.
This update addresses one of the issues related to the Remote Procedure Call Service (rpcss.exe). Specifically, it resolves a race condition that could arise between the DCOM and the RPC endpoint mapper. This could lead to performance issues.
Another issue has been fixed with Microsoft HTML Application Host (HTA). In certain instances, code execution that relied on Microsoft HTA was blocked due to Windows Defender’s feature. This update resolves the conflict issue, allowing for proper code execution.
Here’s a list of all significant bug fixes in the Windows 10 update:
- Desired State Configuration was impacted by a bug that caused the system to lose previously configured options when metaconfig.mof was missing. This update fixes this issue, ensuring that previously configured options are retained.
- Compatibility issues with certain printers that use Windows Graphical Device Interface (GDI) printer drivers were also addressed in this update. These drivers did not wholly adhere to GDI specifications, leading to printing issues. The update fixes this problem, improving overall printer performance.
- The update also resolves an issue related to the Simple Certificate Enrollment Protocol (SCEP) certificate. Previously, the system reported SCEP certificate installations failed, even when still pending. This update ensures these installations are reported pending, improving the user experience.
- In some instances, the Fast Identity Online 2.0 (FIDO2) PIN credential icon was not appearing on the credentials screen of an external monitor attached to a closed laptop. This update fixes this issue, ensuring that the icon appears as expected.
- This update will also benefit apps that use the Windows UI Library in the Windows App SDK (WinUI 3). Printing for these applications is now possible.
- The SharedPC account manager was found unable to delete multiple accounts during cleanup. This issue has been resolved, ensuring that accounts are deleted as intended.
- This update addresses an issue that might cause lsass.exe to stop responding. Specifically, the issue occurs when lsass.exe sends a Lightweight Directory Access Protocol (LDAP) query to a domain controller with a very large LDAP filter.
Microsoft also reminded us that it won’t release new optional or non-security updates for two older versions of Windows 10 – version 20H2 and version 21H2. From this point onwards, only cumulative monthly security updates, referred to as the “B” or Update Tuesday release, will be offered on these machines.
What are the known issues in April 11 update?
Microsoft is aware of an issue affecting kiosk device profiles with auto log-on enabled after installing updates released on January 10, 2023, and later.
These updates cause affected devices to stay on the sign-in screen prompting for credentials, even after Autopilot completes provisioning.
