KB5077797

Microsoft has released an out-of-band cumulative update KB5077797 for Windows 11 version 23H2 (2023 Update). This update resolves issues with login failures when using Remote Desktop, as well as fixing problems with computer shutdown. The package is intended for Enterprise and Education editions on x64 and ARM64 processors.

• Fixes login crashes when connecting to Remote Desktop. After installing the previous update KB5073455, users encountered credential request errors when attempting to connect to Windows 365 and Azure Virtual Desktop via the Windows App. This issue is now resolved. As a temporary workaround, Microsoft previously recommended using the classic Remote Desktop client or the web version of the Windows App.
• Fixes incorrect PC shutdown with Secure Launch feature. On some Windows 11 23H2 (Enterprise and IoT) computers where the Secure Launch feature was enabled, after the January update KB5073455 the system did not shut down properly but instead rebooted. This update eliminates that problem, ensuring correct shutdown and transition to hibernation mode.

Please note: support for Windows 11 version 23H2 for Home and Pro editions ended on November 11, 2025. After this date, the system does not automatically receive monthly security updates, so Microsoft recommends upgrading to Windows 11 version 25H2.

To install update KB5077797 (build 22631.6494), you need to manually download the package from the Microsoft Update Catalog. If you have already installed previous updates, only the new changes contained in this package will be downloaded and installed. The update itself includes all security fixes from the previous cumulative update KB5073455 (build 22631.6491) dated January 13, 2026, as well as the additional important fixes described above.

How the new features work:

Remote Desktop (fixes login crashes when connecting): When connecting via the Windows App, the client initiates RDP authentication using CredSSP. The bug in KB5073455 disrupted credential token exchange between the client, RD Gateway, and server, causing an infinite credential request loop. The fix restores proper TSRequest and TSResponse packet exchange at the TLS transport layer.

Secure Launch (fixes incorrect PC shutdown): Secure Launch activates Dynamic Root of Trust for Measurement (DRTM) mode, loading a minimal kernel (SLinit) in an isolated CPU zone. A bug in the previous update caused a failure in the NtShutdownSystem() → HalRequestPowerAction() call chain: after completing the DRTM session, the system received an incorrect ACPI Sleep State code, treating shutdown as a power reset. The fix corrects the transition table between S5 (shutdown) and S4 (hibernate).

The last 10 Windows updates: