MC1187343 – (Update) New update to address issue affecting Windows 10 devices enrolled on Extended Security Updates (ESU)

Product:

Microsoft 365 admin center, Windows

Platform:

Online, Windows Desktop, World tenant

Status:

Change type:

Admin impact

Links:

Details:

(Update: This message was updated to reflect the availability of the updated November 2025 Scan Cab.)


Microsoft has identified an issue where some Windows 10, version 22H2 devices enrolled in Extended Security Updates (ESU) for commercial customers might fail to install the November 2025 security update (KB5068781) with error 0x800f0922 (CBS_E_INSTALLERS_FAILED). This issue is isolated to devices whose Windows OS licenses were activated via Windows subscription activation through the Microsoft 365 admin center.

The organizations affected by this issue can resolve it by installing KB5072653: Extended Security Updates (ESU) Licensing Preparation Package for Windows 10, which was released on November 17, 2025. Once you install this preparation package (KB5072653), you will be able to deploy the November 2025 security update (KB5068781).


Note: A new Scan Cab including metadata for KB5072653 was made available at 12:00 pm on November 18, 2025 for organizations that utilize cab files for compliance update checks.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-11-18

updated:
2025-11-19

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Failed Security Update Installation
Devices may fail to install critical security updates, leading to vulnerabilities.
   - roles: IT Administrator, Security Officer
   - references: https://support.microsoft.com/help/5068781

Increased Support Tickets
Users may report issues and seek support due to failed updates, increasing workload for IT support.
   - roles: Help Desk Technician, IT Administrator
   - references: https://learn.microsoft.com/windows/deployment/windows-subscription-activation?pivots=windows-10

Compliance Risks
Failure to install security updates may lead to non-compliance with security policies and regulations.
   - roles: Compliance Officer, IT Administrator
   - references: https://support.microsoft.com/help/5072653

User Experience Degradation
Users may experience system instability or security risks, negatively impacting their productivity.
   - roles: End User, IT Administrator
   - references: https://support.microsoft.com/help/5068781

Operational Downtime
Potential downtime for affected devices while issues are being resolved, impacting business operations.
   - roles: IT Administrator, Operations Manager
   - references: https://learn.microsoft.com/windows/deployment/windows-subscription-activation?pivots=windows-10

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Streamlined Update Management
Implement a centralized update management system that automates the deployment of security updates and preparation packages like KB5072653. This will minimize the risk of human error during the update process and ensure all devices are consistently updated.
   - next-steps: Evaluate existing update management tools and consider integrating a solution that supports automation. Train IT staff on the new system and establish a monitoring process for update compliance.
   - roles: IT Administrators, System Engineers, Security Officers
   - references: https://learn.microsoft.com/windows/deployment/windows-subscription-activation?pivots=windows-10" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/windows/deployment/windows-subscription-activation?pivots=windows-10, https://support.microsoft.com/help/5068781

Enhanced License Management
Utilize tools to better track and manage Windows licenses activated via subscription, ensuring compliance and reducing the risk of installation issues like those seen with error 0x800f0922. This could include automated reporting and alerts for licensing status.
   - next-steps: Research and implement a license management tool that integrates with the Microsoft 365 admin center. Conduct training sessions for relevant staff on license compliance and management best practices.
   - roles: Compliance Officers, IT Administrators, Finance Managers
   - references: https://support.microsoft.com/help/5072653

Improved User Communication and Support
Develop a proactive communication strategy to inform users about updates, potential issues, and resolutions. This can enhance user experience and reduce the number of support tickets related to update failures.
   - next-steps: Create a communication plan that includes regular updates to users about the status of Windows updates and how to resolve common issues. Implement feedback mechanisms to improve the process.
   - roles: IT Support Staff, Communication Managers, User Experience Designers
   - references: https://learn.microsoft.com/windows/deployment/windows-subscription-activation?pivots=windows-10" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/windows/deployment/windows-subscription-activation?pivots=windows-10

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only