Win Update KB5127648 Windows 11 Cumulative Update build 26100.9711 (24H2), 26200.9711 (25H2), 26300.9711 (26H2) - Oct. 13



 Microsoft Support:

Announcements and messages​

This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices.

Important: Windows 11, version 24H2 Home and Pro has reached end of updates. The October 2026 monthly security update is the last update available for these editions. Devices running these editions will no longer receive monthly security and non-security preview updates containing protections from the latest security threats. To stay protected and up to date, we recommend you upgrade to the latest version of Windows 11.

Windows Secure Boot certificate expiration
Secure Boot certificate updates remain in progress as Microsoft transitions devices from certificates that began expiring in 2026 to newer certificates. Devices that have not yet received the newer certificates can continue to start and receive standard Windows updates. Microsoft will continue delivering the newer Secure Boot certificates to eligible devices through Windows Update.


Improvements​

This update includes improvements from the following previously released updates:
The following summary outlines key quality improvements addressed by this update. The bold text within the brackets indicates the item or area of the change.
  • [Security updates] This update provides security improvements. For more information about the security vulnerabilities resolved by this update, see the Security Update Guide.
  • [Secure Boot] This update continues the deployment of updated Secure Boot certificates using the latest high-confidence targeting data to identify eligible devices that are ready to automatically receive the new certificates. Deployment through Windows Update remains ongoing across supported devices.
  • [Windows Explorer (Known issue)] Fixed This update fixes an issue that affects Windows Explorer in multi-user environments, such as Azure Virtual Desktop and FSLogix. After sign-in, Explorer.exe might fail to start or repeatedly crash, causing a black screen.
  • [Audio (known issue)] Fixed This update fixes an issue that affects AC-3 audio playback in some applications.
  • [Always On VPN] This update fixes an issue that affects Always On VPN connections after installing KB5124008. When automatic protocol selection or protocol fallback was configured, affected VPN connections could remain stuck in a Connecting state or fail to connect after an initial connection attempt failed. In some cases, subsequent connection attempts could display the error, "The specified port is already in use."
  • [Storage Spaces] This update fixes an issue that affects tiered Storage Spaces Direct virtual disks. Some virtual disks might fail to come online after installing certain security updates, making dependent clustered workloads unavailable.
  • [Date and Time] This update introduces the new (UTC-05:00) Manitoba time zone to support Manitoba’s November 1, 2026, time zone change.
  • [ReFS security] This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default to give administrators time to evaluate and prepare for future security hardening changes. To learn more, see KB5130741.

  • [Printing] This update resolves an issue where printing could fail in some applications and on devices using RAW or Generic Text Only printer drivers after installing the August 2026 security update.
  • [Gaming] This update fixes an issue that could cause mouse input to stutter in some games.
  • [Windows Hello] This update fixes an issue where fingerprint sign-in might not work after a cold boot on some devices.
  • [Authentication] This update strengthens NTLMv1 security by changing the internal default behavior when the BlockNtlmv1SSO registry value is not set. Windows now uses Enforce mode (1) instead of Audit mode (0), blocking the generation of NTLMv1-derived credentials for Single Sign-On (SSO). This change applies only to devices where Credential Guard is disabled and the BlockNtlmv1SSO registry value is not set, and might affect Wi-Fi, Ethernet, and VPN connections that use MS-CHAPv2-based authentication. For more information, see KB5066470.

If you've already installed previous updates, your device will download and install only the new updates included in this package.

Components updates​

AI components
This release updates the following AI components to version 1.2608.951.0: Image Search, Content Extraction, Semantic Analysis, and Settings Model. To learn more, see Release information for AI components.

Servicing stack update
Includes KB5127647 (Build 26100.9703), which improves the reliability of the Windows update installation process. To learn more about SSUs, see Servicing stack updates.

Known issues in this update​

Symptoms

After installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off. On affected devices, the option to turn on Smart App Control might be grayed out.

Devices where Smart App Control is already turned on are not affected and remain protected.

Resolution

Important: This section contains information about modifying the registry. Before you modify the registry, back it up and make sure that you know how to restore it if a problem occurs. For more information, see How to back up and restore the registry in Windows.


Option #1: Modify the registry

You can modify the registry to restore the ability to turn on Smart App Control by following these steps:
  1. Open a Command Prompt window by typing cmd in the Search box.
  2. Select Run as administrator.
  3. At the command prompt, enter the following commands. Then restart the device.

    reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2883193997 /t REG_DWORD /d 1 /f

    reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2850574478 /t REG_DWORD /d 1 /f
Option #2: Install a Group Policy

IT administrators can instead choose to mitigate this issue for enterprise-managed devices managed by IT departments by installing and configuring the special Group Policies listed below.

Group Policy downloads with Group Policy name:
Important: You should install and configure both Group Policies to resolve this issue. The first Group Policy is needed to turn on Smart App Control. The second Group Policy ensures that logging is available to assist with troubleshooting in case any problems arise.

The special Group Policies can be found in Computer Configuration > Administrative Templates > {Group Policy name} > Windows 11, version 24H2, 25H2. After installing the Group Policies, configure the value for both settings to Enabled and restart your device(s) to apply the Group Policy settings.

Next steps: Microsoft is working on a resolution and will provide an update in an upcoming release.

Symptoms

After installing the September 2026 non-security preview update KB5124010, or later updates, non-admin users might be unable to establish Remote Desktop connections to remote devices that have Administrator protection enabled. Attempts to connect might fail with error 0xC000000D and display the message, “The token that was passed to the function is invalid.” This issue primarily affects enterprise-managed remote devices used as Remote Desktop hosts with Administrator protection enabled, regardless of how the feature was enabled.

Note: If your organization uses Windows security baselines, published through the Microsoft Security Compliance Toolkit, Administrator protection is enabled by default in Windows 11, version 24H2, 25H2, and 26H2 security baselines, unless your organization has configured the policy differently.

Resolution

IT administrators can mitigate this issue on devices affected by the Remote Desktop connection failure by using their existing policy management method to temporarily turn off Administrator protection. Reset the User Account Control Type Of Admin Approval Mode policy in Microsoft Intune or Group Policy. For more information, see Administrator protection on Windows 11.

Next steps: Microsoft is working to address this issue in a future Windows update and will provide more information when it is available.

Symptoms

After installing the September 8, 2026, Windows security update (KB5124012), some USB Audio Class 1.0 devices might fail to start or produce audio. Affected devices might experience one or more of the following symptoms:
  • The device displays an error in Device Manager: "This device cannot start (Code 10).”
  • No audio output.
  • Volume controls are unresponsive or remain at zero.
  • Sound settings are unresponsive or unavailable.
Some devices might function in standard stereo configurations but fail when using multichannel audio features, including 8-channel or 3D audio modes. Some customers have reported that they're able to restore audio in these cases by switching to 2-channel mode.

This issue is limited to USB Audio Class 1.0 devices.

Resolution

This issue is partially resolved in the out-of-band (OOB) update released on September 14, 2026, (KB5129195). This OOB update resolves the symptoms experienced on devices using 8-channel or 3D audio modes. Microsoft is working to address the other symptoms and will provide more information when it is available.

IT administrators who need an immediate workaround for the symptoms not addressed yet by the OOB update should contact Microsoft Support for Business for assistance.

How to get this update​

Deployment​

If you deploy dynamic updates such as this update to an existing Windows image, ensure the boot.stl file is included as part of the installation media. Failure to include the file might prevent devices from successfully starting from the installation media and can result in error code 0xc0430001.

Note: The boot.stl file is used during Secure Boot validation and must match the Windows version and architecture of the image you are updating.

To ensure the boot.stl file is included as part of the installation media, do one of the following:
  • Use the Update WinPE script to update an existing Windows image. (Recommended)
  • Manually copy the boot.stl file from the device Windows\Boot\EFI folder to the corresponding folder on your installation media before deploying the update.
For information about how to apply Dynamic Update packages to existing Windows images, see Update Windows installation media with Dynamic Update.

Install this update​

To install this update, use one of the following Windows and Microsoft release channels.

Available​
Next Step​
Available
This update downloads and installs automatically from Windows Update and Microsoft Update.
Available
To install this update, download the standalone package(s) for this update from the Microsoft Update Catalog. This update contains MSU files that require installation in a specific order. Follow the Arm64 installation instructions or x64 installation instructions, as appropriate.

File information​

For a list of the files provided in this update, download the file information for cumulative update KB5127648.

For a list of the files provided in the servicing stack update, download the file information for the SSU KB5127647 - (Build 26100.9703).


 Source:



Check Windows Updates


26H2 ISO from Microsoft MCT:



UUP Dump:

64-bit ISO download:

ARM64 ISO download:

 
Last edited:
This is an often misunderstood topic.

SFC only has one job: To confirm if the correct Windows files are present in their right locations. SFC compares what is listed in the Component Store vs. what is found in the \Windows and \Program Files folders. If any file is missing or "corrupted" (ie. different) then it's replaced by a new hardlink back to the Component Store. SFC presumes the Component Store is healthy and correct.

DISM health checks don't assume the Component Store is intact, and try to use metadata or a reference image source (local image or via network access) to confirm if any WinSxS files are missing or corrupted.

Neither process affects the other. Running SFC doesn't affect the DISM status.

But if you have recently DISM repaired the Component Store, then it may be useful to run SFC again, because SFC was dependent on what the Component Store said was "correct" when it last ran.
I see several cases when SFC /SCANNOW finds corrupted components and also fixes them on the same tun.
DISM /SCANHEALTH only checks for components that need to be repaired. /RESTOREHEALTH tries to fix what needs to be fixed.
I usually run SFC /SCANNOW before and after the DISM commands. 🤷‍♂️
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel I9-9900K64GBNVIDIA RTX 2060
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Dell XPS 8930
CPU
Intel I9-9900K
Memory
64GB
Graphics Card(s)
NVIDIA RTX 2060
Sound Card
NVIDIA High Definition Audio
Monitor(s) Displays
4k Samsung
Screen Resolution
3840 x 2160
Hard Drives
512GB NVMe, ADATA SU 800, 2TB HDD
What files do you see repaired in the SFC logs? If it corrects anything at the \Windows, \Windows\System32, \Program Files* level – those are not component files.

The component folders live under \Windows\WinSxS, with some package data in \Windows\Servicing.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
You're right, but if you run SFC again it gives a clean bill of health so there is or must be a bug in the restorehealth option with a specific setting or a removed key or something else because not everyone sees that error. I have that error but everything runs fine although I did disable a bunch of stuff. So, you play, you pay (in my case).

I've been having this dism /restorehealth "cannot find source ..." 0x800f0915 issue for months now, sfc always ends clean though. No major problems with this comp in general. Yet, I have an elephant in the room: I belong to those people that removed the 2 "unreclaimable packages" (un-removable?) that were always left over after a dism /startcomponentcleanup. There was this thread with a super enthusiastic onset I found at the time (the mood quickly changed 3-4 pages into that thread, but I did not read that far - tl;dr, my mistake).

From what I eyeballed on this forum, my impression was/is that there might be no relation between (a) removal of them packages and (b) the dism "cannot find source ... " error. So, I'd like to ask if anybody who has the current dism error 0x800f0915 did not remove those 2 componentstore packages? Then I can send the elephant away.

Maybe, when I've summoned up the courage, I'll try the windows update repair option. On the other hand, a windows registry error was somewhere said to be involved, might as well wait untill and if µSoft fixes it. It's not a biggy. Anyway, looks like computers are like people: quite similar on the outside but no two are the same.
 

My Computer My Computer

At a glance

W11 - 26H2 - 26300.9711 - Home.AMD Ryzen 5 5500U with AMD Radeon Graphics, 2...16 GBAMD Radeon Graphics
OS
W11 - 26H2 - 26300.9711 - Home.
Computer type
Laptop
Manufacturer/Model
Lenovo Ideapad 1 15ALC7 82R4
CPU
AMD Ryzen 5 5500U with AMD Radeon Graphics, 21000 MHz
Memory
16 GB
Graphics Card(s)
AMD Radeon Graphics
Sound Card
AMD, REALTEK
Screen Resolution
1920 x 1080
Hard Drives
SSD, 474 GB, Western Digital
Keyboard
de-DE, standard PS/2
Mouse
Touchpad
Internet Speed
LAN, 50 MBit/s (down), 50 MBit/s (up)
Browser
FF with uBlock Origin feat. Surfshark
Antivirus
MS Defender (and careful surfing), sometimes VT online.
Other Info
BIOS (UEFI) JTCN60WW, secure boot, fast boot.
I've been having this dism /restorehealth "cannot find source ..." 0x800f0915 issue for months now, sfc always ends clean though. No major problems with this comp in general. Yet, I have an elephant in the room: I belong to those people that removed the 2 "unreclaimable packages" (un-removable?) that were always left over after a dism /startcomponentcleanup. There was this thread with a super enthusiastic onset I found at the time (the mood quickly changed 3-4 pages into that thread, but I did not read that far - tl;dr, my mistake).

From what I eyeballed on this forum, my impression was/is that there might be no relation between (a) removal of them packages and (b) the dism "cannot find source ... " error. So, I'd like to ask if anybody who has the current dism error 0x800f0915 did not remove those 2 componentstore packages? Then I can send the elephant away.

Maybe, when I've summoned up the courage, I'll try the windows update repair option. On the other hand, a windows registry error was somewhere said to be involved, might as well wait untill and if µSoft fixes it. It's not a biggy. Anyway, looks like computers are like people: quite similar on the outside but no two are the same.
My logs said 242 file flags detected 193 repaired (flagged endlessly on each reboot). The unrepairable 49 were clustered at .8972 (25 files) and .9278 (17), with a few at .5074, .9168, .8737, .7705 and .1882. Components involved: FSRM, WPD shell extension, App-V, webcam UI host, event aggregation, filter manager utils, host guardian client, ICM UI, tethering, Explorer ADMX resources. All the same result with the 0x800f0915 source error. The scan was repeated several times over weeks of updates same end result different number of flagged files.
This is the summary of my log^^

This has been explained before so I will just repeat and quote what was said as to why the source error is happening.

"Many continue to get this issue even on the just released latest builds because the needed repair files are now stored in the cloud and many systems can no longer find the correct matching files from the cloud that are needed. Because Microsoft now forces Windows to rely heavily on dynamic cloud payloads for servicing, the Microsoft cloud servers contain severe file mismatches compared to what is actually running on users' machines."
 

My Computer My Computer

At a glance

Windows 11Ryzen 7 5800X32GBRTX 4070 Ti Super
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
MSI
CPU
Ryzen 7 5800X
Motherboard
MSI B550 Tomahawk
Memory
32GB
Graphics Card(s)
RTX 4070 Ti Super
Monitor(s) Displays
2
Screen Resolution
2560*1440
Hard Drives
Several SSDs
PSU
SeaSonic Focus Gold 650W
Browser
Firefox Nightly
What files do you see repaired in the SFC logs? If it corrects anything at the \Windows, \Windows\System32, \Program Files* level – those are not component files.

The component folders live under \Windows\WinSxS, with some package data in \Windows\Servicing.


It’s a known Windows issue — SFC often repairs Bluetooth driver files like BthHfEnum.sys after updates, even if the hardware works fine, and it’s not always a sign of a deeper problem.

I have never seen SFC results change after /RESTOREHEALTH on any of my machines. 🤷‍♂️
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel I9-9900K64GBNVIDIA RTX 2060
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Dell XPS 8930
CPU
Intel I9-9900K
Memory
64GB
Graphics Card(s)
NVIDIA RTX 2060
Sound Card
NVIDIA High Definition Audio
Monitor(s) Displays
4k Samsung
Screen Resolution
3840 x 2160
Hard Drives
512GB NVMe, ADATA SU 800, 2TB HDD
It’s a known Windows issue — SFC often repairs Bluetooth driver files like BthHfEnum.sys after updates, even if the hardware works fine, and it’s not always a sign of a deeper problem.
The CU currently includes "BthHfEnum.sys" as part of the update.

But... users have been complaining about SFC repairing the BT drivers as far back as 4 years ago (way before the current round of DISM complaints).

 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
I see several cases when SFC /SCANNOW finds corrupted components and also fixes them on the same tun.
There are two types of errors that SFC reports that it has found and corrected. One is major, the other trivial.
The major error is a corrupt file that has been fixed with a good copy from the component store.
The trivial one is that ownership or security permissions have been set twice on a system file. It's trivial because both settings are the same and it has no effect at all on the running of Windows.

Both are reported at the command line with the same wording though. The only way to find which type was found/fixed is to read the log file C:\Windows\Logs\CBS\CBS.log

There's a lot in CBS.log besides SFC's reports. You need to filter it first, Option Three in Brink's tutorial.

When SFC runs from within Windows, it logs its actions into the C:\Windows\Logs\CBS\CBS.log file with [SR] tags.

This option creates a sfcdetails.txt file on your desktop that shows you only the specific SFC details from the huge CBS.log.

Use System File Checker (SFC) to Repair System Files in Windows 11

The trivial one does not have the [SR] tag, you'll need to search for the word 'twice' to find it. It's most commonly seen in Windows 10.

Bree said:
...the one thing SFC can find and fix that does not get the [SR] tag, that seems to only be used for corrupt files that need to be replaced. If it's just permissions/ownership then the file itself is not corrupt.

This seems to be found most often after installing a Preview cumulative update, the Patch Tuesday CUs seldom show this.

The error itself is trivial and would have no effect if left unfixed. If you run SFC /ScanNow to fix the permissions, you should find in CBS.log that the previous owner and the new owner are the same.

Code:
 2022-03-23 14:29:03, Info                  CSI    0000007e Warning: Overlap: Directory \??\C:\WINDOWS\Logs\CBS\ is owned twice or has its security set twice
   Original owner: Microsoft-Windows-ServicingStack, version 10.0.19041.1613, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}
   New owner: Microsoft-Windows-ServicingStack, version 10.0.19041.1613, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}
2022-03-23 14:29:03, Info                  CSI    0000007f Warning: Overlap: Directory \??\C:\WINDOWS\Servicing\ is owned twice or has its security set twice
   Original owner: Microsoft-Windows-ServicingStack, version 10.0.19041.1613, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}
   New owner: Microsoft-Windows-ServicingStack, version 10.0.19041.1613, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}
2022-03-23 14:29:03, Info                  CSI    00000080 Warning: Overlap: Directory \??\C:\WINDOWS\Servicing\Packages\ is owned twice or has its security set twice
   Original owner: Microsoft-Windows-ServicingStack, version 10.0.19041.1613, arch x86, nonSxS, pkt {l:8 b:31bf3856ad364e35}
   New owner: Microsoft-Windows-ServicingStack, version 10.0.19041.1613, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}
Ten Forums | SFC found integrity violations, how to check before fixing? - post #5
 

My Computers My Computers

  • At a glance

    Windows 11 HomeAMD Athlon Silver 3050U8GBRadeon Graphics
    OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer Aspire 3 A315-23-R9VY
    CPU
    AMD Athlon Silver 3050U
    Memory
    8GB
    Graphics Card(s)
    Radeon Graphics
    Monitor(s) Displays
    laptop screen
    Screen Resolution
    1366x768 native resolution, up to 2560x1440 with Radeon Virtual Super Resolution
    Hard Drives
    1TB Samsung EVO 870 SSD (from April 2026: 250GB EVO 850)
    Internet Speed
    150 Mbps
    Browser
    Edge, Firefox
    Antivirus
    Defender
    Other Info
    UPDATE - 11 April 2026: due to lid hinges starting to break up this laptop has been retired from active duty. The OS with all software and files has been migrated to my System Seven in 'Other systems' to carry on as my general purpose 'main machine'.

    I've now clean installed 25H2 and used Garlin's scripts to update Secure Boot to CA 2023 and revoke the PCA 2011 certificates. It's new role is to test secure boot issues.

    Info for 2021-2026:
    fully 'Windows 11 ready' laptop. Windows 10 C: partition migrated from my old unsupported 'main machine' then upgraded to 11. A test migration ran Insider builds for 2 months. When 11 was released on 5th October 2021 it was re-imaged back to 10 and was offered the upgrade in Windows Update on 20th October. Windows Update offered the 22H2 Feature Update on 20th September 2022. It got the 23H2 Feature Update on 4th November 2023 through Windows Update, 24H2 on 3rd October 2024 through Windows Update by setting the Target Release Version for 24H2, and 25H2 on 30th September 2025 through Windows Update by setting the Target Release Version for 25H2.
  • At a glance

    Windows 11 ProIntel® Core™ i5-520M8GB(integrated graphics) Intel HD Graphics
    Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell Latitude E4310
    CPU
    Intel® Core™ i5-520M
    Motherboard
    0T6M8G
    Memory
    8GB
    Graphics card(s)
    (integrated graphics) Intel HD Graphics
    Screen Resolution
    1366x768
    Hard Drives
    500GB Crucial MX500 SSD
    Browser
    Firefox, Edge
    Antivirus
    Defender
    Other Info
    unsupported machine: Legacy bios, MBR, TPM 1.2, upgraded from W10 to W11 using W10/W11 hybrid install media workaround.

    In-place upgrade to 22H2 using ISO and a workaround.
    Feature Update to 23H2 by manually installing the Enablement Package.
    In-place upgrade to 24H2 using hybrid 23H2/24H2 install media.
    Upgraded to 25H2 by Enablement Package.
    Upgraded to 26H2 by Enablement Package.

    Also running Insider Experimental 263xx and 29xxx builds and Windows 10 as native boot .vhdx.
  • My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB NVMe ssd, supported device running Windows 11 Pro.

    My SYSTEM FOUR was a 2-in-1 convertible Lenovo Yoga 11e (1st gen) type 20DA, Celeron N2930, 8GB RAM, 256GB ssd. Unsupported device. This has now been sold. It has been replaced by my System Eight.

    My SYSTEM FIVE is a Dell Latitude 3190 2-in-1, Pentium Silver N5030, 8GB RAM, 1TB NVMe ssd, supported device running Windows 11 Pro, plus Insider Beta, Experimental 263xx and 29xxx builds (and a few others) as a native boot .vhdx.

    My SYSTEM SIX is a Dell Latitude 5550, Core Ultra 7 165H, 64GB RAM, 1TB NVMe SSD, supported device, Windows 11 Pro, Hyper-V host machine. Updated to 25H2 on 30th September 2025.

    My SYSTEM SEVEN is a Lenovo Thinkpad T580, 1920x1080 touchscreen, Intel Core i7-8650U, 16GB RAM, 512GB NVMe SSD + 2nd 512GB NVMe SSD, a supported device for Windows 11. This is my current general purpose 'main machine'. The installed Windows 11 Home from my System One has been migrated to this machine. As its new home has an existing digital licence for Pro I've been able to upgrade the migrated OS from Home to Pro.
    29 Sept. 2026 Feature Update to 26H2 through Windows Update.

    My SYSTEM EIGHT is a 2-in-1 convertible Lenovo Yoga 11e (5th gen) type 20LN, Celeron N4120, 8GB RAM, 512GB NVMe ssd, a supported device for Windows 11. Currently running Windows 11 Pro, plus Insider Beta, Experimental 263xx and 29xxx builds as native boot vhdx.
There are two types of errors that SFC reports that it has found and corrected. One is major, the other trivial.
The major error is a corrupt file that has been fixed with a good copy from the component store.
The trivial one is that ownership or security permissions have been set twice on a system file. It's trivial because both settings are the same and it has no effect at all on the running of Windows.

Both are reported at the command line with the same wording though. The only way to find which type was found/fixed is to read the log file C:\Windows\Logs\CBS\CBS.log

There's a lot in CBS.log besides SFC's reports. You need to filter it first, Option Three in Brink's tutorial.

Use System File Checker (SFC) to Repair System Files in Windows 11

The trivial one does not have the [SR] tag, you'll need to search for the word 'twice' to find it. It's most commonly seen in Windows 10.


Ten Forums | SFC found integrity violations, how to check before fixing? - post #5
I usually attach the CBS logs to the FBH reports if I see anything unusual. Those files are way too long to show them in here. 🤷‍♂️
Nothing wrong currently on this build. 🤞🤷‍♂️

Microsoft Windows [Version 10.0.26300.9711]
(c) Microsoft Corporation. All rights reserved.

C:\Windows\System32>DISM /ONLINE /CLEANUP-IMAGE /RESTOREHEALTH

Deployment Image Servicing and Management tool
Version: 10.0.26100.9549

Image Version: 10.0.26300.9711

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

C:\Windows\System32>



1792718472228.webp


1792718253805.webp
 
Last edited:

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel I9-9900K64GBNVIDIA RTX 2060
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Dell XPS 8930
CPU
Intel I9-9900K
Memory
64GB
Graphics Card(s)
NVIDIA RTX 2060
Sound Card
NVIDIA High Definition Audio
Monitor(s) Displays
4k Samsung
Screen Resolution
3840 x 2160
Hard Drives
512GB NVMe, ADATA SU 800, 2TB HDD
This is the summary of my log^^

This has been explained before so I will just repeat and quote what was said as to why the source error is happening.

"Many continue to get this issue even on the just released latest builds because the needed repair files are now stored in the cloud and many systems can no longer find the correct matching files from the cloud that are needed. Because Microsoft now forces Windows to rely heavily on dynamic cloud payloads for servicing, the Microsoft cloud servers contain severe file mismatches compared to what is actually running on users' machines."
Where did you find that comment about the cloud.
I don't have any issue on my machines, and I don't rely on the cloud at all. 🤷‍♂️

 

My Computer My Computer

At a glance

Windows 11 Pro 25H2Intel I9-9900K64GBNVIDIA RTX 2060
OS
Windows 11 Pro 25H2
Computer type
PC/Desktop
Manufacturer/Model
Dell XPS 8930
CPU
Intel I9-9900K
Memory
64GB
Graphics Card(s)
NVIDIA RTX 2060
Sound Card
NVIDIA High Definition Audio
Monitor(s) Displays
4k Samsung
Screen Resolution
3840 x 2160
Hard Drives
512GB NVMe, ADATA SU 800, 2TB HDD
This worked for me when my power plan got off track one time.

powercfg -restoredefaultschemes

Restart computer.
I didn't know that! I will definitely going to try it.
:thumbsup:
The idea didn't worked for me, but I kept it on my annotations since I did not know it.
But, after several days fighting with it, today, came to my mind: CMOS, so I did it... Problem solved!
Thank you for your input.
 

My Computer My Computer

At a glance

Windows 11Intel® Xeon® X5690 3.47GHz Six-CoreG.Skill PC3-12800 1600MHz 24GBNVIDIA GeForce GTX 1050
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Asus/Custom Build
CPU
Intel® Xeon® X5690 3.47GHz Six-Core
Motherboard
Asus P6T Deluxe v2
Memory
G.Skill PC3-12800 1600MHz 24GB
Graphics Card(s)
NVIDIA GeForce GTX 1050
Sound Card
SoundMAX ADI AD2000B HD Audio
Monitor(s) Displays
Acer T232HL Touch Screen
Screen Resolution
1920 x 1080 @ 60Hz
Hard Drives
6 Crucial MX500 SSD 1TB each.
PSU
Thermaltake Toughpower Gold 850W
Case
Thermaltake Armor VA8000SWA
Cooling
Thermaltake Air Cooling System
Keyboard
Illuminated Multimedia LED Keyboard
Mouse
M16 Dual Mode Illuminated Mouse - Bluetooth / 2.4 GHz Mode
Internet Speed
800 Mbps
Browser
Edge / Opera / Vivaldi / Chrome / Firefox / Brave
Antivirus
Windows Defender Security
This how I go about. This time, all is clean.
1792723243597.webp
 

My Computer My Computer

At a glance

Windows 11 Pro 26H2Intel® Core™ i9-13900K Desktop Processor 16 (...G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3...Asus Dual Geforce Rtx™ 3060 TI Edition 8gb Gddr6
OS
Windows 11 Pro 26H2
Computer type
PC/Desktop
CPU
Intel® Core™ i9-13900K Desktop Processor 16 (8P+8E)
Motherboard
Asus TUF Gaming Z790-PLUS WIFI D4
Memory
G.Skill Ripjaws V Series 32gb (2x16gb) DDR4 3600mhz
Graphics Card(s)
Asus Dual Geforce Rtx™ 3060 TI Edition 8gb Gddr6
Monitor(s) Displays
BenQ EW3270U 31.5” 3840x2160 UHD 16:9 HDR LED 4K LG 27UK850-W 27'' 4K UHD IPS LED Monitor with HDR10
Screen Resolution
3840x2160
Hard Drives
Samsung 990 with heatsink PRO PCIe 4.0 Gen 4 NVMe® SSD 1TB
WD_BLACK SN850X NVMe M.2 2280 1TB PCI-Express 4.0
Crucial T500 2TB Gen4
Samsung 970 Evo M.2 2280 2tb Pcie Gen3. X4
PSU
Corsair AXi Series AX860i Digital 860W 80 PLUS PSU
Case
Fractal Meshify C ATX Mid Tower Case
Keyboard
Logi MX Keys
Mouse
Logi M705
Internet Speed
400 mbs
Browser
Firefox
Antivirus
Eset NOD32
Other Info
Love fast boots
Where did you find that comment about the cloud.
I don't have any issue on my machines, and I don't rely on the cloud at all. 🤷‍♂️

Was posted on another thread. What do you mean you don't rely on the cloud? DISM and the Restore Health function literally pull from it now if you don't point to a source, so does the WUS.

Another theory here also mentioned

Anyway, i am done trying to solve this as its still clearly a microsoft related issue despite some people not having it.
 
Last edited:

My Computer My Computer

At a glance

Windows 11Ryzen 7 5800X32GBRTX 4070 Ti Super
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
MSI
CPU
Ryzen 7 5800X
Motherboard
MSI B550 Tomahawk
Memory
32GB
Graphics Card(s)
RTX 4070 Ti Super
Monitor(s) Displays
2
Screen Resolution
2560*1440
Hard Drives
Several SSDs
PSU
SeaSonic Focus Gold 650W
Browser
Firefox Nightly

Latest Support Threads

Back
Top Bottom