Microsoft dropped the optional KB5101684 preview update for Windows 11 on July 28, 2026, targeting versions 24H2 and 25H2. The non-security cumulative release pushes OS Builds to 26100.8973 and 26200.8973, respectively, and packs a surprisingly wide array of fixes—from long‑overdue File Explorer behavior changes to external Windows Hello fingerprint support—while also laying more groundwork for the company’s urgent Secure Boot certificate migration.

The Practical Details: What KB5101684 Actually Delivers

The update touches nearly every corner of the daily Windows experience. File Explorer’s Details view finally shows file sizes in appropriate units (KB, MB, GB) instead of forcing everything into raw kilobytes. You can now middle‑click folders in the address bar or Home page to open them in new tabs, mimicking browser‑like navigation. Microsoft also fixed the annoying grey flash on Home page load and the tendency to scroll back to the top unexpectedly. Thumbnails in the Recommended section are crisper, too.

Start menu and taskbar reliability got a quiet bolster. Saved view preferences should stick more reliably, and keyboard navigation within the app list is smoother. A redesigned account control now appears for Microsoft‑account users, complete with a subscription status badge—handy for some, but a clear nudge toward account dashboarding right inside the Start menu.

Widgets become less shouty. Notification badges now use your Windows accent color instead of red, and new users will only see Weather on the Lock screen by default, trimming visual clutter.

Precision touchpad users gain two new settings under Settings > Bluetooth & devices > Touchpad: scroll and zoom speed, and accelerated scrolling. These let you fine‑tune the baseline pace and enable a speed‑boost as you repeat gestures—a welcome change for anyone who’s wrestled with one‑size‑fits‑all scrolling defaults.

Accessibility and voice features also advance. Magnifier’s touch panning bars are now off by default so they don’t cover content. Voice Access adds Voice Isolation to filter out background speakers and noise, supports Korean, and gets a reliability bump. Voice typing’s fluid dictation is off by default for new users, with a teaching tip available—a more conservative rollout that leaves control with the user.

Windows Hello Enhanced Sign‑in Security (ESS) now extends to supported external fingerprint readers, a first. Desktop users can plug in a compatible ESS reader and enroll via Settings > Accounts > Sign‑in options, gaining biometric sign‑in without a built‑in sensor. As Microsoft notes, the feature is just beginning to roll out and depends on third‑party hardware support.

On the enterprise side, KB5101684 fixes a dangerous DFS mapped‑drive issue where files could be incorrectly marked as internet‑sourced after a device reconnected from a disconnected state. File History backups to SMB network shares no longer fail with bogus “invalid credentials” errors. Clipboard reliability improves in Remote Desktop and Azure Virtual Desktop scenarios, and Office apps behave more stably in virtualized environments. Printing gets a boost for IPPS printers, and DHCP renewal is more robust on Modern Standby machines.

Under the hood, four AI components—Image Search, Content Extraction, Semantic Analysis, and Settings Model—bump to version 1.2607.840.0. Copilot+ PC users can now remove the Image Generation AI component entirely. The update also includes servicing stack update KB5101711 (build 26100.8962) to keep the update engine itself healthy.

Why This Update Lands Differently for You

For home users and everyday PC owners

If you’ve been living with File Explorer showing terabyte‑sized files as millions of kilobytes, or your touchpad scroll feels sluggish, this update is a direct quality‑of‑life lift. The external fingerprint reader support could finally untether desktops from passwords. The widget and Lock screen changes reduce visual noise. Since KB5101684 is optional—delivered via Settings > Windows Update > Advanced options > Optional updates—you can grab it now only if you’re affected by these issues. Otherwise, the same fixes will roll into next month’s mandatory Patch Tuesday release.

For power users and enthusiasts

Middle‑click tabbing, accent‑colored badges, and the ability to shed the Image Generation AI component on Copilot+ PCs give you more control. The touchpad and voice isolation features are genuinely useful tweaks. If you test Windows builds, this preview is a low‑risk way to validate fixes ahead of the broader roll‑out.

For IT professionals and admins

The DFS Mark of the Web fix alone could save hours of troubleshooting false positives on internal file shares. File History’s SMB backup repair restores a critical fallback for smaller businesses. The Secure Boot certificate delivery gets more device‑targeting data, broadening the set of machines that can receive the new certificates automatically. But deploying this update on managed estates isn’t a background task: Microsoft’s documentation warns that if you apply dynamic updates to existing images, you must include the boot.stl file in the installation media. Missing it can lead to error 0xc0430001 and prevent the media from booting. Pilot the update on representative hardware, especially where BitLocker, custom firmware, or older devices are involved.

How We Got to KB5101684

Microsoft’s D‑week optional previews have been the norm for years, landing on the fourth Tuesday of each month. They let users and IT departments validate reliability fixes before they become mandatory the following month. This July 2026 release is unusually broad, touching everything from File Explorer to Secure Boot, reflecting a servicing strategy that no longer waits for annual feature updates to deliver meaningful polish.

The Secure Boot certificate transition has been simmering since at least early 2026. Certificates issued in 2011 began expiring in June 2026, threatening the trust chain that validates early‑boot software. Microsoft has been gradually delivering new certificates via Windows Update to consumer and non‑managed business devices. KB5101684 increases the pool of eligible devices with “high confidence” data, accelerating the rollout before older certificates fully expire.

Windows 11 24H2 Home and Pro editions exit support on October 13, 2026—just a few months away. Enterprise and Education SKUs have until October 2027. That urgency hums quietly behind this update, especially for users who still need to plan their version migration.

Your Action Plan: What to Do Right Now

  1. Decide whether to install the optional update.
    - Install now if you’re personally affected by the listed fixes (File Explorer, touchpad, File History, Remote Desktop, or Windows Hello).
    - Wait for the August Patch Tuesday security update if your machine is stable and you prefer automatic deployment.
    - For IT environments, spin up a test fleet that includes devices with DFS shares, SMB backups, virtual desktops, and varied firmware. Validate the Secure Boot certificate behavior and BitLocker interaction.

  2. Check your Secure Boot certificate status.
    Use PowerShell or the System Information tool to see which certificates are installed. Compare against Microsoft’s published guidance. Even if your PC starts normally, you may not be fully protected for future early‑boot threats.

  3. Prepare for Windows 11 24H2 end of service (Home/Pro).
    If you’re on 24H2 Home or Pro, the October 2026 deadline is real. This preview cycle is one of your last chances to test reliability before you must upgrade to a newer version.

  4. If you maintain deployment images, review the boot.stl requirement.
    Microsoft explicitly warns that updated images must contain a matching boot.stl file in the EFI folder. Use the Update WinPE script or manually copy it from Windows\Boot\EFI. Overlooking this can brick your installation media.

  5. For Copilot+ PC owners, consider removing the Image Generation AI component if you don’t use it—found under optional features.

What to Watch Next

KB5101684’s content will almost certainly appear in the August 2026 security update. The Secure Boot certificate push will continue for months, and admins should watch for any boot‑related side effects as more devices receive the new certificates. With Windows 11 24H2 Home/Pro nearing end of life, expect clearer upgrade prompts from Microsoft. And as AI components become more modular, future servicing updates will likely continue offering removal options—a small but meaningful gesture toward user control.

For now, this July preview is a reminder that Windows updates can still surprise with practical, everyday improvements, not just silent security patches.