Roll Back KB5065426 to Restore Web-based RDP in Chrome (Windows 11 24H2)

This guide explains how to remove the 2025-09 Cumulative Update for Windows 11, version 24H2 (KB5065426, OS Build 26100.6584).

On Intune enrolled devices, this update breaks RDP from Chrome (web) by causing the session to hang.

Unenrolled devices are not affected. The workaround is to uninstall KB5065426 and temporarily block it until a permanent fix is ready.

1. Confirm Affected Build

GUI

1. Press Win + R, type winver, and confirm OS Build 26100.6584.
2. Go to Settings → Windows Update → Update history → Quality updates and check for KB5065426.

PowerShell

$kb = 'KB5065426'
$hotfix = Get-HotFix -Id $kb -ErrorAction SilentlyContinue
$build  = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion")
"{0}.{1}" -f $build.CurrentBuild, $build.UBR
if ($hotfix) { "Installed: $($hotfix.HotFixID) on $($hotfix.InstalledOn)" } else { "Not installed." }

1. Uninstall on a Single PC

GUI

1. Open Settings → Windows Update → Update history → Uninstall updates.
2. Select 2025-09 Cumulative Update (KB5065426) → click Uninstall.
3. Restart when prompted.

CMD

wusa /uninstall /kb:5065426 /quiet /norestart

shutdown /r /t 5 /c "Rebooting to complete removal of KB5065426"

PowerShell

$kb = '5065426'

Start-Process wusa.exe "/uninstall /kb:$kb /quiet /norestart" -Wait

if ($LASTEXITCODE -in 0,3010) { Restart-Computer -Force }

Updated on: 19/09/2025