Announcing Windows 11 Insider Preview Build 25905
Hello Windows Insiders, today we are releasing Windows 11 Insider Preview Build 25905 to the Canary Channel. We are releasing ISOs for this build – they can be downloaded here.
Starting with today’s build, Windows Insiders in the Canary Channel will notice that the name of the branch shown in the desktop watermark has changed back to RS_PRERELEASE. As a result of this change, Insiders will notice that some features that were previously removed temporarily with the switch over to ZN_RELEASE have now returned – in addition to some new features mentioned below.
REMINDER: As builds released to the Canary Channel are “hot off the presses,” we will offer limited documentation for builds flighted to the Canary Channel including documenting only the most significant and highly impactful known issues. Please note that we will not publish a blog post for every flight – only when new features are available in a build.
What’s new in Build 25905
New features from the Dev Channel
This build includes new features from the Dev Channel, such as Dev Drive, Backup and Restore improvements (Windows Backup), Dynamic Lighting, the Windows App SDK version of File Explorer and Gallery, and more.
Rust in the Windows Kernel
Rust offers advantages in reliability and security over traditional programs written in C/C++. This preview shipped with an early implementation of critical kernel features in safe Rust. Specifically, win32kbase_rs.sys contains a new implementation of GDI region. While this is a small trial, we will continue to increase the usage of Rust in the kernel. Stay tuned!
[We are beginning to roll this out, so the experience isn’t available to all Insiders in the Canary Channel just yet as we plan to monitor feedback and see how it lands before pushing it out to everyone.]
Arm32 UWP App deprecation
Starting in this Insider Preview build in the Canary Channel, we have removed support for Arm32 UWP applications from Windows on Arm, as documented here: Windows 11 Specs and System Requirements. After the OS upgrade, any installed Arm32 applications will no longer launch on your device. Note that this does not affect Arm64 applications.
- During setup, you will see a message with a list of applications that are currently Arm32 installed on the system.
- In many cases, the list of impacted applications will be reduced by manually forcing the Microsoft Store to install any pending application updates prior to the OS upgrade. To do this, launch the Microsoft Store application, choose “library”, then click on the “Get Updates” button.
- After the OS upgrade is complete, to fix any Arm32 applications, you will need to manually uninstall then reinstall those applications from the Microsoft Store. By doing so, you will install a compatible version that will run on your device.
New PostAuthenticationAction support for terminating individual processes in Windows LAPS
Thank you everyone who gave us feedback on the new Windows Local Administrator Password Solution feature which we shipped a few months ago. Several customers pointed out that the new Post Authentication Actions feature (PAA) only handled termination of interactive logon sessions. This meant that PAA was not able to terminate specific individual processes that were launched in an OTS (over-the-shoulder) elevation scenario, for example using runas.exe. We are announcing an improvement with this build that addresses this feedback on that limitation. A new option has been added to the PostAuthenticationActions Group Policy in this Insider Preview build:
The new option is described as “Reset the password, logoff the managed account, and terminate any remaining processes”. This new option is basically a superset of the previous “Reset the password and logoff the managed account” option. When the new setting is configured, PAA will first notify and then terminate any interactive logon sessions, followed by enumerating and terminating any remaining processes that are still running under the Windows LAPS-managed local account identity. No notification precedes this termination.
In addition, we’ve greatly expanded the event logging messages that are emitted during post-authentication-action execution, to give you deeper insights into exactly what was done during the operation.
Note: “Reset the password and logoff the managed account” remains the default PAA action.
Please try out this new feature and let us know what you think here on the Windows LAPS feedback page.
SMB Updates [Added 7/13]
Beginning with Build 25905 for the Pro and Education editions of Windows 11, SMB signing is now required by default for all connections. This the same behavior change first added in Build 25381 for the Enterprise editions. This changes legacy behavior, where Windows 10 and 11 required SMB signing by default only when connecting to shares named SYSVOL and NETLOGON and where Active Directory domain controllers required SMB signing when any client connected to them. This is part of a campaign to improve the security of Windows and Windows Server for the modern landscape.
For more information on this change, visit https://aka.ms/SMBSigningOBD
Recover your PC from Windows Update [Added 7/13]
A new Windows Update recovery feature in this build under Settings > System > Recovery and “Fix Problems using Windows Update”. On eligible Insider Channels such as the Canary Channel today, this feature will download and install a repair version of the OS. This operation reinstalls the OS that you have and will not remove any files, settings, or apps. The repair content is displayed on the Windows Update Settings page with the title appended with “(repair version)”. This capability can be useful in many instances but is intended to be used for keeping the device secure and up to date. Devices may need to complete in progress updates prior to this process taking effect.
Changes and Improvements
[General]
- [ADDED 7/13] Starting with this build, we have adjusted the prerequisites (removal of Modern Standby/HSTI validation and untrusted DMA ports check) for enabling device encryption so that it is automatically enabled when doing clean installs of Windows 11.
[Emoji]
- With the update of our color font format to COLRv1, Windows is now able to display richer emoji with a 3D like appearance with support coming soon to some apps and browsers. These emoji use gradients to bring the design style that our customers have been asking for. The new emoji will bring more expression to your communications.
[Zune]
- In celebration of Marvel Studio’s Guardians of the Galaxy Volume 3, we temporarily re-launched Zune.net last month. We also took the opportunity to fix an issue that was causing some challenges in getting the original Zune drivers to install in Windows 11 with this build in the Canary Channel. So now it should be easier to use your (totally unsupported and still discontinued) Zune on Windows 11. Over time, the fix will make its way through the Insider Channels and eventually to all Windows 11 customers. For fun, check out how Scott Hanselman brought a few Zunes back to life.
Microsoft Store Update
Windows Insiders in all channels running version 22306.1401.x.x of the Microsoft Store and higher will see the following improvements rolling out:
More pricing information: To help you with your purchase decisions, you’ll now see information about the lowest price products have dropped to in the past 30 days.
Introducing AI Hub: Explore a new curated section in the Microsoft Store where we will promote the best AI experiences built by the developer community and Microsoft. This is a space where we will educate customers on how to start and expand their AI journey, inspiring them to use AI in everyday ways to boost productivity, spark creativity and so much more.
FEEDBACK: Please file feedback in Feedback Hub (WIN + F) under Microsoft Store.
Known issues
- [NEW] This build will not be offered to some ASUS devices or PCs with ASUS motherboards due to an issue causing a bugcheck when attempting to update to this build.
- [NEW] Ethernet-connected devices may lose network connectivity after updating to this build. Unplugging the ethernet cable and re-plugging the cable in should resolve the issue.
For developers
You can download the latest Windows Insider SDK at aka.ms/windowsinsidersdk.
SDK NuGet packages are now also flighting at NuGet Gallery | WindowsSDK which include:
- .NET TFM packages for use in .NET apps as described at ms/windowsinsidersdk
- C++ packages for Win32 headers and libs per architecture
- BuildTools package when you just need tools like MakeAppx.exe, MakePri.exe, and SignTool.exe
These NuGet packages provide more granular access to the SDK and better integration in CI/CD pipelines.
SDK flights are now published for both the Canary and Dev Channels, so be sure to choose the right version for your Insider Channel.
Remember to use adaptive code when targeting new APIs to make sure your app runs on all customer machines, particularly when building against the Dev Channel SDK. Feature detection is recommended over OS version checks, as OS version checks are unreliable and will not work as expected in all cases.
About the Canary Channel
The Canary Channel is the place to preview platform changes that require longer-lead time before getting released to customers. Some examples of this include major changes to the Windows kernel, new APIs, etc. Builds that we release to the Canary Channel should not be seen as matched to any specific release of Windows and some of the changes we try out in the Canary Channel will never ship, and others could show up in future Windows releases when they’re ready.
The builds that will be flighted to the Canary Channel are “hot off the presses,” flighting very soon after they are built, which means very little validation and documentation will be done before they are offered to Insiders. These builds could include major issues that could result in not being able to use your PC correctly or even in some rare cases require you to reinstall Windows. We will offer limited documentation for the Canary Channel, but we will not publish a blog post for every flight – only when new features are available in a build.
Our Canary Channel won’t receive daily builds; however, we may ramp up releasing builds more frequently in the future.
The desktop watermark you see at the lower right corner of your desktop is normal for these pre-release builds.
Important Insider Links
- You can check out our Windows Insider Program documentation here.
- Check out Flight Hub for a complete look at what build is in which Insider channel.
Thanks,
Amanda & Brandon