Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Use an Intune Expedite quality update policy if KB5077744 is still available in your tenant’s update list; use a Win32 .msu deployment only when the expedite route is unavailable or unsuitable. KB5077744 was released on January 17, 2026, to address Remote Desktop sign-in failures after the January 13 update KB5074109. It targets Windows 11 24H2 and 25H2, but it is now a historical update: first check whether each device already has KB5077744 or a newer applicable cumulative update. Do not force an old package onto a device that is already remediated.
What KB5077744 fixes—and whether you still need it
Microsoft released KB5077744 as an out-of-band (OOB), cumulative quality update on January 17, 2026. It addressed Remote Desktop sign-in and authentication failures introduced by the January 13, 2026 security update, KB5074109, including affected Remote Desktop-related application scenarios such as Windows App. The update also included the applicable fixes and security content from that January security update. It was not a general fix for every Remote Desktop connection problem.
Microsoft’s release notes cover KB5077744 and its fixes, applicability, installation guidance, and known issues. Because this is an older OOB release, review the current support page and Windows release information before deployment. In August 2026, the right question is not simply “Does this device have KB5077744?” but “Does it have this fix or a newer applicable cumulative update?”
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchCheck the device’s Windows version and build in Settings > System > About, or run winver. Microsoft’s Windows 11 release information can help confirm build history. Do not confuse this quality update with a feature update: deploying KB5077744 does not move a device from 24H2 to 25H2.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
| Windows release | Architecture | Build with KB5077744 | Approximate Catalog size |
|---|---|---|---|
| Windows 11 24H2 | x64 | 26100.7627 | 4,252.3 MB |
| Windows 11 25H2 | x64 | 26200.7627 | 4,252.3 MB |
| Windows 11 24H2 | ARM64 | 26100.7627 | 3,906.4 MB |
| Windows 11 25H2 | ARM64 | 26200.7627 | 3,906.4 MB |
The 24H2 and 25H2 downloads are separate Catalog entries, and ARM64 packages are distinct from x64 packages. If you need a standalone payload, choose the entry matching both the device’s Windows release and architecture in the Microsoft Update Catalog search for KB5077744. The listed sizes are approximate.
Method 1: Deploy with an Intune Expedite quality update policy
This is the preferred route when the update is eligible and appears in your tenant. Intune’s expedite policy uses Windows Update to select an applicable package for a device, rather than requiring you to assign separate MSU files by architecture. Microsoft notes that only supported updates appear in the selection list; an older OOB release may not be selectable in every tenant or at every point in time.
Check prerequisites first
- Devices are enrolled in Intune and are Microsoft Entra joined or Microsoft Entra hybrid joined.
- Devices can reach Intune and the Windows Update service endpoints they need.
- Telemetry is enabled at least at the Required level.
- The Microsoft Account Sign-In Assistant service (
wlidsvc) is enabled and running. - Windows Update scanning is not disabled or redirected in a way that blocks the intended update path.
- Review update-ring settings and any WSUS, intranet Microsoft Update service location, Automatic Updates, feature-update deferral, or Dual Scan policies that could conflict with timely scanning or installation.
- Confirm the devices are not on an unsupported Insider preview configuration for this expedite scenario.
See Microsoft’s Expedite policy documentation and quality update guidance for current requirements. Expedite can bypass normal deferrals for the selected update, but it does not override every Windows Update restriction or replace your normal update-ring strategy.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Create and roll out the policy
- In the Intune admin center, confirm a small pilot group of applicable Windows 11 24H2 and 25H2 devices.
- Go to Devices > Windows Updates > Quality updates.
- Select Create > Expedite policy.
- Inspect the quality-update list for the January 2026 OOB release. Select it only if it is listed and still appropriate for the target devices.
- Configure the restart deadline. The documented choices are 0, 1, or 2 days. Zero days leaves users very little time to save work; one or two days is generally more practical for business endpoints unless an active operational emergency justifies a faster restart.
- Assign the policy to the pilot group, then monitor policy and device update reports.
- After confirming installation, restart behavior, and Remote Desktop authentication in the pilot, expand the assignment in controlled stages.
An expedite assignment can result in a forced restart after its configured deadline. Plan for active users and Remote Desktop sessions; do not promise a silent or interruption-free installation. For routine monthly patching, continue to use the organization’s normal update rings and quality-update process. See Microsoft’s update-ring management guidance.
Method 2: Package the MSU as an Intune Win32 app
Use this fallback if KB5077744 is absent from the expedite list, Windows Update policy delivery is unsuitable, or you need a fixed payload and custom applicability controls. Microsoft describes Win32 deployment of an MSU as a more manual approach—not the preferred option when Windows Update policies can deliver the update. A fixed historical MSU also carries more risk of deploying a superseded package, so build supersedence and architecture checks into your process.
- Confirm need and applicability. Identify devices that still need the remediation and verify their Windows release and architecture. Exclude devices already on KB5077744 or a newer applicable update unless you have a specific, documented reason to install the historical package.
- Download the matching MSU. Use the Microsoft Update Catalog to select the correct 24H2 or 25H2, x64 or ARM64 entry. Do not send the x64 file to ARM64 devices.
- Prepare the source. Put the MSU and any required install script in a source folder. Use Microsoft’s Win32 update-package deployment guidance and the Microsoft Win32 Content Prep Tool to create the
.intunewinpackage. - Create the Win32 app. In Intune, upload it as a Windows app (Win32). Set an install command, architecture-aware applicability, assignments, and a detection rule. Test the final command and return-code handling in a pilot tenant before broad assignment.
- Deploy and monitor. Assign to a pilot first, coordinate restart behavior with users and device policy, then review Win32 app status and validate the OS build and application behavior.
Microsoft’s Win32 guidance illustrates the Windows Update Standalone Installer command pattern with another KB:
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
wusa.exe .windows10.0-kb5031356-x64_65d5bbc39ccb461472d9854f1a370fe018b79fcc.msu /quiet /norestart -WaitFor KB5077744, replace the example filename with the exact matching Catalog file. Do not assume this sample’s command handling, including the -Wait argument in an Intune command line, transfers unchanged to your package. Validate installer behavior, exit codes, restart handling, and Intune interpretation in a test deployment. For a local standalone installation, Microsoft’s KB page also documents DISM and PowerShell approaches. Its example uses an x64 filename, so it must not be copied onto ARM64 devices:
DISM /Online /Add-Package /PackagePath:C:Packageswindows11.0-kb5077744-x64_fb63f62e4846b81b064c3515d7aff46c9d6d50c8.msuAdd-WindowsPackage -Online -PackagePath "C:Packageswindows11.0-kb5077744-x64_fb63f62e4846b81b064c3515d7aff46c9d6d50c8.msu"Design detection for supersedence
Do not mark the app installed solely because the installer process ran. Detection should recognize KB5077744, the correct minimum build for the device’s Windows release, or a newer applicable cumulative update. The relevant KB builds are 26100.7627 on 24H2 and 26200.7627 on 25H2; never compare a 24H2 device to the 25H2 build number. Keep architecture and OS-release applicability separate from detection.
Get-HotFix -Id KB5077744 can be a useful check, but hotfix enumeration is not always a complete representation of component-based servicing state. For a higher-confidence deployment decision, combine build validation with servicing data or Intune reporting. In particular, make detection accept a safe superseding build so that a device already remediated by a newer cumulative update does not repeatedly receive the old Win32 app.
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Verify that devices are remediated
- Confirm the device completed the required restart; downloaded or offered is not the same as installed.
- Use
winveror Settings > System > About to check the OS version and build against the applicable baseline, or confirm a later applicable build. - Where useful, run
Get-HotFix -Id KB5077744, while accounting for the limitations of hotfix enumeration. - Review Intune’s quality-update report for expedite deployments or the Win32 app status for packaged deployments. Investigate “failed” and “not applicable” statuses rather than treating every result alike.
- Test the affected Remote Desktop sign-in or authentication scenario. A successful installation alone does not prove that the original user workflow now works.
- Confirm the device remains managed under its normal update-ring and compliance strategy.
Troubleshooting common deployment problems
KB5077744 is not in the Expedite list
The update may no longer be eligible because a newer update supersedes it, may have been removed from the supported selection set, or the tenant or device may not meet the expedite prerequisites. Check the current Intune guidance and Windows release information, then verify Windows Update scanning, update-ring settings, and WSUS-related policy. If devices need remediation, deploy the current applicable cumulative update where appropriate. Use the historical MSU only when there is a specific reason it is required and the devices are applicable.
A device reports “not applicable”
This may be expected, not a deployment failure: the device may already have KB5077744 or a superseding update, may not be on 24H2 or 25H2, or may have a mismatched architecture or build. Confirm the device’s version, architecture, and current build before changing assignments.
Free tools Windows power users keep installed
One-click scans. No signup required.
The update downloads but does not finish installing
Check for a pending restart, low disk space, Windows Update service or Windows Update Medic service problems, conflicting policy, component-store or servicing-stack errors, and blocked Microsoft service endpoints due to VPN, proxy, or firewall rules. Ensure the device is online and checking in. Restart when appropriate, trigger an Intune sync, inspect Windows Update and CBS/DISM logs, and test the matching standalone package locally on a controlled device before changing the broader deployment.
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
The Win32 app reinstalls repeatedly
Review the detection rule, app return-code handling, and assigned package. Common causes include detection that checks only for the KB when a newer cumulative update is installed, assignment of the wrong architecture file, a Windows version outside the app’s applicability, or an installer exit code Intune interprets as failure. Make detection version-aware and accept a safe newer build.
Known issues to weigh before installing the historical package
Microsoft’s KB5077744 page lists issues that administrators should consider when evaluating an older deployment. It notes that the password icon may appear invisible on the lock screen even though the password control remains available; the issue primarily affected enterprise or managed environments. The page also describes some cloud-storage application hangs or errors when opening or saving files in cloud-backed storage such as OneDrive or Dropbox, including some Outlook configurations with PST files stored on OneDrive. Microsoft identifies later update KB5078127 as addressing the cloud-storage issue.
Check the current KB page for the latest issue status and resolution details before rollout. Do not infer that the KB’s original known issues remain unresolved on a device that has received later cumulative updates.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Which deployment method should you use?
| Consideration | Expedite quality update | Win32 MSU |
|---|---|---|
| Best fit | Eligible update appears in Intune; Windows Update connectivity is available | Expedite is unavailable or a fixed payload/custom control is necessary |
| Package selection | Windows Update selects an applicable package | Administrator must select and assign the right release and architecture |
| Restart and reporting | Built-in expedite deadline and quality-update reporting | Restart behavior, detection, and app reporting must be designed and tested |
| Primary risk | Policy or connectivity issues can still block delivery | Higher chance of wrong, superseded, or repeatedly offered package without sound detection |
For most managed 24H2 and 25H2 devices that still need the remediation, pilot an Expedite policy when the OOB release is selectable. If it is not, investigate whether a newer cumulative update is the correct answer before packaging KB5077744. Reserve Win32 deployment for a demonstrated need, with architecture-aware assignments, supersedence-aware detection, and a tested restart plan.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
