Windows 11 July 2026 Update: Install KB5101650 Safely

The Windows 11 July 2026 update is more than a routine restart. Microsoft released KB5101650 on July 14 for Windows 11 versions 25H2 and 24H2, bringing the systems to OS builds 26200.8875 and 26100.8875. It includes security fixes, Secure Boot certificate work, and quality improvements. A small group of Dell PCs with Intel Innovation Platform Framework drivers also needed a later out-of-band fix, so a careful installation is worth the extra few minutes.

This guide explains what changed, who should install the update, how to prepare, and what to do if Windows Update shows an error. The goal is simple: get the security benefits without risking avoidable downtime.

What is KB5101650?

KB5101650 is Microsoft's July 2026 cumulative security update for Windows 11 25H2 and 24H2. A cumulative update contains the latest security corrections plus earlier improvements your PC may have missed. Microsoft lists the resulting builds as 26200.8875 for 25H2 and 26100.8875 for 24H2.

The release also continues Microsoft's rollout of newer Secure Boot certificates. Existing certificates began reaching expiration dates in 2026, so keeping Windows Update enabled is important even if your computer appears to work normally. Microsoft says machines without the newer certificates will continue to start and receive standard updates while the rollout continues.

Why this update deserves priority

1. It closes documented security weaknesses

Microsoft ties KB5101650 to its July 2026 Security Update Guide. Attackers often study published fixes and target computers that remain unpatched, making timely installation one of the highest-value security actions for a home or small-business PC.

2. It strengthens the Secure Boot transition

Secure Boot helps stop untrusted software from loading before Windows. The update adds targeting data so more eligible devices can receive renewed Secure Boot certificates automatically. Users should not attempt to replace these certificates manually unless their device maker or IT administrator provides specific instructions.

3. It includes practical reliability fixes

Microsoft says the update fixes an Office automation problem introduced by the June update and changes hotkey cleanup behavior. It also enforces registration requirements for old third-party TDI network transports. Most consumers will not use these transports, but organizations running legacy networking software should test the update on a small device group first.

Before installing: a five-minute safety checklist

• Save active work: browsers, editors, and virtual machines may need to close during the restart.
• Connect power: plug in a laptop and avoid updating on a nearly empty battery.
• Back up important files: sync essential documents to trusted cloud storage or an external drive.
• Check free space: keep at least 15 to 20 GB free so Windows can stage the update and roll back if necessary.
• Pause risky changes: do not update BIOS firmware, storage drivers, and Windows at the same time. One change at a time makes troubleshooting much easier.

Extra check for some Dell PCs

Microsoft temporarily held KB5101650 for a limited number of Dell devices using an Intel Innovation Platform Framework driver because of a compatibility issue. The July 18 out-of-band update KB5121767 addressed the affected systems. If your Dell PC did not receive the update immediately, do not force-install a package from an unofficial download site. Check Windows Update again and install all offered Dell or Intel driver updates first.

How to install the Windows 11 July 2026 update

1. Open Settings.
2. Select Windows Update.
3. Choose Check for updates.
4. Install the cumulative update labelled KB5101650, or the newer update Windows offers for your device.
5. Restart when prompted, then allow Windows to finish configuring the update.

Use Windows Update rather than a random third-party installer. It evaluates your version, architecture, compatibility holds, and superseding updates before selecting the correct package.

How to verify the update installed correctly

Press Windows + R, type winver, and press Enter. Windows 11 25H2 should show build 26200.8875 or later; 24H2 should show 26100.8875 or later. A higher build is normal because Windows may have installed a newer cumulative or out-of-band update.

You can also open Settings > Windows Update > Update history and look under Quality Updates. Confirm that the latest entry reports a successful installation, then test Wi-Fi, audio, Bluetooth, sleep, and any business-critical apps.

What to do if KB5101650 fails

Restart and retry once

A pending driver or earlier update can block a new package. Restart the PC, reconnect to a stable network, and run Windows Update again. Avoid repeated forced shutdowns while the percentage indicator is moving.

Run the built-in troubleshooter

Go to Settings > System > Troubleshoot > Other troubleshooters, then run the Windows Update troubleshooter. After it completes, restart and check again.

Repair Windows system files

If failures continue, open Terminal as administrator and run DISM /Online /Cleanup-Image /RestoreHealth. When it finishes, run sfc /scannow. These Microsoft tools can repair corrupted component-store and system files that prevent servicing.

Use recovery only when a real problem appears

If the PC becomes unstable after the update, open Settings > Windows Update > Update history > Uninstall updates. Removing a security update reduces protection, so treat this as a temporary diagnostic step and reinstall the corrected or superseding update as soon as it is available.

Security steps after the restart

• Update browsers, password managers, VPN clients, and communication apps.
• Open Windows Security and confirm real-time protection is enabled.
• Review startup apps and remove software you no longer trust or use.
• Turn on automatic backups and test that at least one important file can be restored.
• Use a standard account for everyday work and enable multi-factor authentication on important services.

No single patch makes a PC invulnerable. A current operating system, updated applications, strong authentication, and recoverable backups work together as a layered defense.

Frequently asked questions

Is KB5101650 mandatory?

It is a security update and Windows will normally install it automatically on supported devices. Businesses may deploy it according to their testing policy, but long delays increase exposure to known vulnerabilities.

Does it apply to Windows 11 23H2?

No. Microsoft lists KB5101650 for versions 25H2 and 24H2. Windows 11 23H2 received a separate July 2026 update, KB5099414.

Should Dell users avoid the update?

No broad avoidance is recommended. The compatibility issue affected a limited number of Dell devices with a specific Intel IPF driver, and Microsoft issued KB5121767. Install the update Windows Update offers rather than forcing an older package.

What if my build number is higher?

A higher build usually means a newer cumulative or out-of-band update is already installed. That is expected because newer cumulative updates supersede older ones.

Authoritative sources

• Microsoft: KB5101650 release notes
• Microsoft: KB5121767 out-of-band update
• Microsoft Security Response Center Update Guide

Conclusion

The safest approach to the Windows 11 July 2026 update is straightforward: back up important data, let Windows Update choose the correct package, restart, and verify the build. Most PCs should install KB5101650 normally, while affected Dell systems should receive Microsoft's newer corrective update. A few minutes of preparation delivers the security value with far less troubleshooting risk.