Skip to Content

How Do I Manage Windows 10 ESU Updates After March 2026?

What Are the Key Fixes in the March 2026 Windows 11 Update?

Microsoft released cumulative security and quality updates for supported Windows 11 and Windows 10 systems on March 10, 2026. These Patch Tuesday releases address specific system vulnerabilities, enhance internal security protocols, and improve overall operating system performance. Organizations using Windows 10 must now possess an Extended Security Update (ESU) license to receive these critical patches.

Windows 11 Quality Improvements

The KB5079473 update delivers essential security patches and feature enhancements for Windows 11 versions 24H2 and 25H2. Administrators can deploy this patch automatically via Windows Update or manually through the Microsoft Update Catalog, WSUS, and Windows Update for Business.

  • Secure Boot: The system utilizes precise device diagnostic data to automatically issue new security certificates during a controlled, phased rollout.
  • File Explorer: Microsoft improved search reliability when users query multiple storage drives or the local PC environment.
  • Application Control: The update corrects allowlisting policies to ensure authorized COM objects function properly under strict endpoint security settings.
  • System Image Manager: A new warning dialog prompts administrators to verify trusted catalog files before selection.

Windows 11 Enterprise Updates

Microsoft deployed update KB5078883 specifically for Windows 11 23H2 Enterprise and Education editions. Windows 11 23H2 Home and Pro editions no longer receive updates after reaching their end-of-support phase in November 2025.

  • Secure Boot Management: New PowerShell commands (-Decoded and Get-SecureBootSVN) allow administrators to read keys in a readable format and verify firmware compliance.
  • File History: The backup utility now successfully processes files containing Chinese and Private Use Area characters.
  • Graphics Performance: The patch stabilizes specific GPU configurations to ensure reliable system shutdowns and smooth 3D application performance.
  • Typography: Microsoft integrated the Saudi Riyal currency symbol into core system fonts to maintain accurate visual consistency.

Windows 10 Security Patches

Windows 10 version 22H2 transitioned to the ESU program in October 2025, meaning standard support has ended. Microsoft provides update KB5078885 exclusively for organizations utilizing the ESU program and systems running Windows 10 21H2 Enterprise LTSC. Older Long-Term Servicing Channel (LTSC) versions also receive dedicated security patches to maintain system integrity.

  • Update KB5078885 (21H2-22H2): Enhances graphics stability, fixes File History character encoding, and updates Secure Boot certificates for eligible client devices.
  • Update KB5078752 (2019 LTSC): Adds catalog file verification prompts and resolves the File History backup errors.
  • Update KB5078938 (1607 LTSC): Delivers core security improvements, requiring administrators to install the latest Servicing Stack Update (SSU) before manual deployment.