KB5079489 — March 2026 Cumulative Update for Windows 11 (OS Build 28000.1764)

Overview

KB5079489 is a comprehensive cumulative update released on March 26, 2026, for Windows 11 version 24H2 systems. This preview update advances the operating system to OS Build 28000.1764 and includes significant improvements to system stability, performance optimizations, and security enhancements.

What's New in Build 28000.1764

This cumulative update introduces several key improvements to the Windows 11 experience:

• Enhanced Search Performance: Windows Search now operates with 40% lower CPU usage and delivers results 25% faster for local files
• Improved File Explorer Stability: Resolves crashes when accessing network drives with Unicode characters in UNC paths
• Faster Start Menu Response: Start menu now opens within 200ms after system wake from sleep or hibernation
• Reliable Windows Updates: Fixes error 0x80070643 that prevented automatic update downloads
• Accurate System Monitoring: Task Manager now displays correct memory usage statistics with 99% accuracy
• Optimized App Installation: Microsoft Store apps install successfully with only 500MB free space required

Technical Details

The update modifies several core Windows components to address performance and stability issues:

Windows Search Service Optimization

The search indexer service has been completely rewritten to use more efficient memory allocation patterns. Background indexing operations now consume significantly less CPU resources, particularly when processing large file collections or network locations. The improved algorithms reduce system impact during peak usage periods.

File Explorer Network Handling

Updates to shell32.dll improve how File Explorer handles network resource enumeration and Unicode path names. The enhanced error handling prevents crashes when accessing inaccessible network resources and provides better timeout management for slow network connections.

Power Management Integration

Start menu responsiveness improvements include better integration with the Windows power management subsystem. The StartMenuExperienceHost.exe process now properly reinitializes cached data and UI components after power state transitions, eliminating the previous 3-second delay.

Security Enhancements

While primarily focused on stability and performance, KB5079489 includes several security improvements:

• Enhanced validation for network path handling to prevent potential buffer overflow conditions
• Improved memory protection for search indexer processes
• Strengthened authentication mechanisms for Windows Update communications
• Updated certificate validation for Microsoft Store app installations

System Requirements

This update applies to the following Windows 11 configurations:

Installation Process

The installation process for KB5079489 follows standard Windows Update procedures:

1. Automatic Installation: The update is offered through Windows Update as an optional preview update
2. Download Phase: Approximately 890 MB download for x64 systems, 720 MB for ARM64
3. Installation Phase: 15-25 minutes depending on system performance
4. Restart Required: System restart is mandatory to complete the installation
5. Verification: Post-installation verification confirms OS Build 28000.1764

Enterprise Deployment

IT administrators can deploy this update using standard enterprise management tools:

Windows Server Update Services (WSUS)

The update synchronizes automatically to WSUS servers and is classified as Important. Administrators can approve the update for specific computer groups and schedule installation during maintenance windows.

Microsoft System Center Configuration Manager

SCCM administrators can create deployment packages for KB5079489 and target specific device collections. The update supports both required and available deployment types.

Microsoft Intune

Intune administrators can configure update rings to include this cumulative update for managed Windows 11 devices. The update respects configured maintenance windows and restart policies.

Verification Commands

After installation, administrators can verify the update using these PowerShell commands:

# Check installed updates
Get-HotFix -Id KB5079489

# Verify OS build number
(Get-ItemProperty "HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion").BuildLabEx

# Check Windows Update history
Get-WmiObject -Class Win32_QuickFixEngineering | Where-Object {$_.HotFixID -eq "KB5079489"}

Rollback Procedures

If issues occur after installation, the update can be removed through several methods:

• Settings App: Navigate to Settings > Windows Update > Update history > Uninstall updates
• Control Panel: Programs and Features > View installed updates
• Command Line: wusa /uninstall /kb:5079489