Skip to main content
CybersecurityVulnerability Management

Microsoft Rolls Out Windows 11 Update with Point-in-Time Restore Feature

Person sitting at laptop with system restore interface on screen, hands paused on keyboard.

"Point-in-time restore enables users to restore a Windows PC to the exact state in which it was at an earlier point in time. It happens in minutes using restore points." explains Microsoft.

KB5095093: an optional preview roll‑out

Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2 as part of its optional, non‑security end‑of‑month update schedule. Unlike regular Patch Tuesday cumulative releases, these monthly preview updates do not contain security fixes and are offered to devices as optional tests of forthcoming fixes and features. Installing KB5095093 updates Windows 11 24H2 and 25H2 systems to build 26100.8737.

Users can install the update from Settings > Windows Update by clicking Check for updates and then the Download and install link; the update will install automatically only if the "Get the latest updates as soon as they're they're available" option is enabled. KB5095093 is also available for manual download from the Microsoft Update Catalog.

Point‑in‑time restore: what the feature does and how it works

Point‑in‑time restore is the headline feature beginning to roll out in KB5095093. Microsoft describes it as a fast, local recovery mechanism that "restores the full system state captured within the last 72 hours." Restore points are captured using Volume Shadow Copy Service (VSS) and are stored locally on the device.

  • For consumers, restore points are created every 24 hours and are deleted after 72 hours or when the system runs out of the allocated storage for snapshots.
  • For enterprise licenses, administrators can configure snapshot frequency to 4, 6, 12, 16, or 24 hours and set retention at the same intervals.
  • Settings allow increasing the storage allocated to snapshots so more frequent points can be kept without being deleted due to lack of space.

Microsoft positions the feature as focused on "reliability and a broad range of issues," and advertises that restores happen in minutes, covering the operating system, applications, and personal files to minimize downtime without lengthy troubleshooting or specialist skills.

Selected immediate fixes and rolling feature rollouts

KB5095093 contains a mix of immediate fixes and features Microsoft is gradually rolling out after installation. Immediate changes include improvements to Secure Boot certificates distribution, Netlogon secure channel connections for domain controllers configured before 2025, and a fix for a Recycle Bin confirmation dialog that could display internal filenames instead of original file names after installing the June 2026 security update (KB5094126).

Among rolling features and improvements being delivered are:

  • Emoji panel GIF content now uses GIPHY after Google's Tenor API deprecation; Microsoft warns users they must install the latest update by June 30, 2026 to continue GIF access or they will see a "GIF service is not available" error.
  • A calendar experience in Windows Update Settings that lets users pause updates by selecting an end date for up to 35 days.
  • Widgets changes that reduce interruptions, disable hover-to-open by default, adjust notification behavior, and improve performance and responsiveness.
  • File Explorer speed and usability improvements, including quick actions on hover, better address bar behavior, fixes for OneDrive duplication in Favorites, and refinements to renaming behavior.
  • Bluetooth and Phone Link reliability and audio routing improvements, accessibility zoom and magnifier changes, WSL networking fixes, and a new default to Internet Printing Protocol (IPP) for new printer installs when supported.

Known issue and user guidance

Microsoft warns of a remaining known issue in KB5095093 that can prevent third‑party applications from launching Microsoft Office apps or opening Office documents. The company says it is working on a future fix and advises affected users to open the Office application or document directly rather than launching it from the interfering third‑party software. The Recycle Bin confirmation dialog problem noted above is marked as fixed in this update.

What this means for consumers, enterprise IT, and administrators

  • Consumers: Point‑in‑time restore will create daily automatic snapshots by default and retain them for 72 hours, offering a quick rollback option for common faults. Users who rely on GIFs in the Emoji panel must install the update by June 30, 2026 or lose that GIF service until they update.
  • Enterprise IT and administrators: Enterprises can configure snapshot frequency and retention down to four‑hour intervals and increase allocated snapshot storage, giving IT teams more granular control over recovery windows. Netlogon improvements for older domain controller setups and updated Secure Boot certificate targeting are intended to reduce update failures and increase reliable coverage during phased rollouts.
  • IT support and application owners: Teams should note the Office launch interoperability issue and prepare user guidance or workarounds until Microsoft issues the announced fix in a subsequent update.

KB5095093 bundles a wide set of reliability, usability, and recovery changes alongside feature experiments delivered under Microsoft's optional preview cadence. For administrators and users deciding whether to install now, the tradeoff is early access to recovery features such as Point‑in‑time restore and interface improvements against known non‑security preview characteristics and the transient Office interoperability problem Microsoft is addressing.

Read the full release notes and original reporting here: https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5095093-update-rolls-out-new-point-in-time-restore-feature/