MC1217507 – The January 2026 Windows security update is now available

Product:

SharePoint, Windows, Windows Server

Platform:

Online, Windows Desktop, World tenant

Status:

Change type:

Admin impact

Links:

Details:

The January 2026 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained.

Highlights for the Windows 11, version 25H2 update:
This security update includes improvements that were a part of update KB5072033 (released December 9, 2025).
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
This update addresses an issue where you might experience RemoteApp connection failures in Azure Virtual Desktop environments. This might occur after installing KB5070311.
This update addresses an issue where devices with a Neural Processing Unit (NPU) might stay powered on when idle.


Short on time? Watch our Windows 11 release notes video for this month's tips.


Note: Starting with the January 2026 security update, Windows Server 2025 will have its own KB identifiers and build numbers, separate from Windows 11, versions 24H2 and 25H2. This change improves clarity for administrators. Installation and management processes remain the same.


For instructions on how to install this update, see the KB for your operating system listed below:
Windows 11, versions 25H2 and 24H2: KB5074109
Windows 11, version 23H2: KB5073455
Windows 11 Enterprise LTSC 2024: Hotpatch Baseline
Windows 10, versions 22H2 and 21H2: KB5073724
Windows 10 Enterprise LTSC 2019 and Windows Server 2019: KB5073723
Windows 10 LTSB 2016 and Windows Server 2016: KB5073722
Windows Server 2025: KB5073379
Windows Server 2025 Datacenter: Azure Edition: Hotpatch Baseline
Windows Server 2022: KB5073457
Windows Server 2022 Datacenter: Azure Edition: Hotpatch Baseline
Windows Server 2012 R2: Monthly Rollup: KB5073696
Windows Server 2012: Monthly Rollup: KB5073698
Windows Server 2008 R2 Service Pack 1: Monthly Rollup: KB5073695 / Security Only: KB5073699
Windows Server 2008 SP2: Monthly Rollup: KB5073697 / Security Only: KB5073700

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2026-01-14

updated:
2026-01-14

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

RemoteApp Connection Failures
Without proper preparation, users may experience RemoteApp connection failures in Azure Virtual Desktop environments, leading to disruptions in accessing applications remotely.
   - roles: IT Administrators, End Users
   - references: https://support.microsoft.com/help/5070311

Neural Processing Unit (NPU) Issues
Devices with a Neural Processing Unit may remain powered on when idle, potentially causing unnecessary power consumption and impacting user experience.
   - roles: IT Administrators, End Users
   - references: https://support.microsoft.com/help/5072033

Installation Confusion
The separation of KB identifiers and build numbers for Windows Server 2025 may lead to confusion among administrators during installation and management processes, affecting operational efficiency.
   - roles: System Administrators, IT Support Staff
   - references: https://support.microsoft.com/topic/07d1ed4c-f570-492e-a8e0-ab807a5bc296

Servicing Stack Issues
Quality improvements to the servicing stack may not be effectively communicated, leading to potential installation issues and user disruptions if updates are not applied promptly.
   - roles: IT Administrators, End Users
   - references: https://support.microsoft.com/help/5072033

Update Management
Failure to prepare for the update may result in delays in applying critical security updates, increasing vulnerability to security threats and impacting user trust.
   - roles: IT Security Officers, End Users
   - references: https://aka.ms/Windows/MonthlyUpdates

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Improved Update Management
With the separation of KB identifiers for Windows Server 2025, administrators can more easily manage and track updates for different Windows versions. This clarity reduces confusion and potential errors during update processes.
   - next-steps: Implement training sessions for IT staff on the new KB identifier system and update management best practices.
   - roles: IT Administrators, System Engineers, Help Desk Support
   - references: https://support.microsoft.com/topic/07d1ed4c-f570-492e-a8e0-ab807a5bc296, https://support.microsoft.com/help/5073379

Enhanced Azure Virtual Desktop Reliability
Addressing the RemoteApp connection failures in Azure Virtual Desktop environments will improve user experience for remote workers relying on this technology, leading to higher productivity and satisfaction.
   - next-steps: Conduct a review of current Azure Virtual Desktop setups to ensure they are updated with the latest security patches and test connectivity post-update.
   - roles: Cloud Administrators, Remote Work Coordinators, IT Support
   - references: https://learn.microsoft.com/azure/virtual-desktop/publish-applications-stream-remoteapp?tabs=portal, https://support.microsoft.com/help/5070311

Optimized Device Power Management
Fixing the issue where devices with a Neural Processing Unit (NPU) stay powered on when idle can lead to energy savings and reduced wear on hardware, enhancing the overall efficiency of IT operations.
   - next-steps: Monitor devices with NPUs for power management settings and ensure that they are configured to optimize energy usage post-update.
   - roles: IT Operations Managers, Facilities Managers, Sustainability Officers
   - references: https://support.microsoft.com/help/5072033, https://support.microsoft.com/help/5073722

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

The latest Windows security update for January 2026 is now available, and it's important to install it to keep your systems secure. Think of these updates like getting a regular check-up for your car. Just as you wouldn't want to skip an oil change or a brake inspection, you shouldn't skip these updates. They ensure that your computer runs smoothly and securely.

This update includes improvements from a previous update and fixes some specific issues. For example, it resolves a problem where RemoteApp connections in Azure Virtual Desktop environments might fail, similar to fixing a glitch in your car's GPS system. It also addresses an issue where devices with a Neural Processing Unit (NPU) might stay powered on when idle, akin to a car engine that doesn't turn off when parked.

Starting with this update, Windows Server 2025 will have its own identifiers, making it easier for administrators to track. This is like giving each car model its own unique service manual, so you know exactly what parts and services are needed.

To install the update, you can follow the instructions specific to your operating system version. It's like following a recipe tailored to the ingredients you have. The process remains straightforward, ensuring that your systems are up-to-date without any hassle.

For those who prefer a quick overview, there's a video available that highlights this month's updates, much like a trailer for a movie that gives you the key points without watching the entire film.