Windows 11 KB5095093 Adds Point-in-Time Restore for Full Rollback

Windows 11 KB5095093 Point-in-Time Restore feature rolling back the OS apps settings and files from a VSS snapshot Windows 11 KB5089573 update

A bad driver, a broken program, or an error after a Windows update can now be rolled back, along with apps, settings, and local files. Microsoft has released the optional preview update KB5095093 for Windows 11 24H2 and 25H2. The headline addition is a feature that restores the PC to a specific moment in time.

About the KB5095093 Update

KB5095093 contains no security fixes and does not install by force, unlike the monthly Patch Tuesday updates. Microsoft ships builds like this at the end of the month to test fixes and features before the next mandatory package. You can install it through Settings, then Windows Update, then Check for updates, and then Download and install. Only users who enabled the option to get the latest updates early will receive it automatically.

After installation, Windows 11 24H2 moves to build 26100.8737. Windows 11 25H2 moves to build 26200.8737. The package is also available for manual download from the Microsoft Update Catalog. The official Microsoft support page lists the full change log.

The Star Feature: Point-in-Time Restore

The new feature creates automatic restore points. It saves a full snapshot of the PC: Windows itself, installed programs, settings, and local files. After a failure, the user can pick a recent point and return the system to that state in minutes. The snapshots stay on the computer and are not sent to the cloud. For capture, Windows uses the Volume Shadow Copy Service (VSS), which it already uses to make file copies.

How Snapshots Are Stored

By default, home computers will capture one point every 24 hours. Each copy is kept for no more than 72 hours, after which Windows deletes it. Earlier deletion can happen if the space set aside for snapshots runs out. Owners of devices with a drive smaller than 200 GB can enable the feature manually. On larger drives, Microsoft plans to turn it on by default during the gradual rollout.

In organizations, administrators can change how often snapshots are created. They can choose an interval from four to 24 hours and set the retention period. They can also raise the disk-space limit so the system does not delete old points too soon. Microsoft notes that the space is not reserved in advance. Windows uses it only after the copies are made.

How It Differs From Classic System Restore

Do not confuse the new mechanism with the old System Restore. The classic feature mainly returns system files and settings, and it affects program and user data unpredictably. Point-in-Time Restore returns the entire saved snapshot of the PC. The old tool lets you create points by hand and keeps them while disk space lasts. The new one works automatically and aims mainly to fix recent problems from the last three days.

Bug Fixes in the Package

KB5095093 fixes a bug that appeared after the June security update, KB5094126. When permanently deleting a file from the Recycle Bin, Windows could show the internal object name in a pop-up instead of the normal filename. The package also fixes notification counters on taskbar program icons. Beyond that, it improves explorer.exe reliability, sign-in stability, and shell extension behavior.

Security and Network Changes

Some changes take effect right away on all eligible devices. Windows continues to gradually update Secure Boot certificates needed for secure startup. It also improves protected Netlogon connections between servers and domain controllers, including older controllers deployed before 2025. Programs and components will connect more reliably to shared network resources, including anonymous connections without credentials.

New Features Arriving Gradually

Some features begin working at once. Others roll out in stages, so the update may install while certain features appear later. Here are the highlights:

  • GIF panel switch: the emoji panel (Win + .) moves to the GIPHY GIF catalog after the Tenor interface shuts down. After June 30, GIFs need a current Windows update, or the panel shows a “service unavailable” message.
  • Update pause calendar: Windows Update gains a pause calendar. You can pick an end date up to 35 days out, then extend it if needed.
  • Quieter Widgets: the board no longer opens on simple hover, and taskbar notifications and counters shrink by default. Icons now show unread counts and clear automatically after you sign out.
  • Accessibility tools: a full-screen color filter lets you choose a tint, set intensity, and schedule it. Magnifier accepts a manual zoom percentage and adjustable steps inside its own window.

File Explorer, Bluetooth, and More

File Explorer gains quick actions on hover from the start page. Work and school Entra ID accounts also get “open file location” and a Copilot query. Microsoft promises faster Explorer launch and fixes for OneDrive duplicates in Favorites, OneDrive shortcut crashes under admin, and file-rename problems.

A large block of fixes touches Bluetooth. Windows syncs the muted-mic state between the mixer and the hands-free profile, spots AirPods faster in pairing mode, and improves the Beats Studio Pro microphone. It also shortens headset reconnection time after hibernation and steadies LE Audio streaming.

Other changes round out the package. Voice access and voice typing add French, German, and Spanish. New printers default to the Internet Printing Protocol when the device supports IPP. Confidential virtual machines gain SR-IOV hardware acceleration for higher throughput. Finally, PCs with more than 32 GB of RAM can run larger local AI models thanks to a revised graphics memory policy.

Known Issue

KB5095093 has one known problem. After installing the update, some third-party programs cannot launch Microsoft Office apps or open Office documents. Microsoft is preparing a fix. For now, users should open the needed program or file directly, rather than through a third-party app.

Support Our Threat Intelligence

If you find our technology report and cybersecurity news helpful, consider supporting our work.

Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Leave a Reply