MC1187786 – M365 Change Digest

One-line summary

Admins using WSUS and Scan Cab for Windows 10 22H2 ESU must re-acquire and re-deploy the updated November 2025 Scan Cab released after 12:00 PM PT on Nov 18, 2025 to address a known issue.

Similar updates

Details

Body (from Message Center)

IMPORTANT: This notice is only relevant for environments where:

Windows Server Update Services (WSUS) is used to deploy Windows security updates to Windows 10, version 22H2 devices enrolled in Extended Security Updates (ESU).
Scan Cab is used to check for update compliance
The November 2025 Scan Cab was deployed before 12:00 PM PT on November 18, 2025.

An updated version of the November 2025 Scan Cab was made available at 12:00 PM PT on November 18, 2025. This Scan Cab includes new metadata for KB5072653 corresponding to a new update released for Windows 10, version 22H2 devices enrolled in ESU. This release (KB5072653) contains a new Extended Security Updates Licensing Preparation Package for Windows 10, and it addresses a recent known issue. See the additional information section of this message for details.

How this affects your organization:

IT administrators who downloaded the Scan Cab before 12:00 PM PT on November 18, 2025, should re-acquire and re-deploy it if the Scan Cab is used to assess updates for environments where WSUS is used to deploy Windows security updates to Windows 10, version 22H2 devices enrolled in ESU.

No action is required on environments where Scan Cab is not employed and do not have Windows 10, version 22H2 devices. However, please note that there might be non-Microsoft applications which utilize Scan Cab. Review the documentation for any software and update deployment tools which might be in use for your organization, to understand if this is applicable in your environment.

What you need to do to prepare:

Administrators can re-deploy the updated Scan Cab via their usual processes. For detailed guidance, see the Additional information section below.

Additional information:

KB5072653: Extended Security Updates (ESU) Licensing Preparation Package for Windows 10
New update to address issue affecting organizations with Windows 10 devices enrolled on Extended Security Updates (ESU)
Updated Scan Cab: Download the new Scan Cab here
Announcing a smaller WSUS Scan Cab - Microsoft Tech Community: Learn more about WSUS and the Scan Cab process
Using WUA to Scan for Updates Offline - Win32 apps | Microsoft Docs: Windows Update Agent (WUA) can be used to scan computers for security updates without connecting to Windows Update
WSUS and the Catalog Site | Microsoft Docs: The Catalog Site used by WSUS to import updates and drivers

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Re-acquire updated November 2025 Scan Cab",
      "Re-deploy Scan Cab for Windows 10 22H2 ESU devices",
      "Review update deployment tools for Scan Cab usage"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Admins using WSUS and Scan Cab for Windows 10 22H2 ESU must re-acquire and re-deploy the updated November 2025 Scan Cab released after 12:00 PM PT on Nov 18, 2025 to address a known issue.",
    "ai_topics": [
      "Windows"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1187786",
    "importance": 3,
    "is_major_change": true,
    "last_modified": "2025-11-18T20:40:32Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "An updated version of the November 2025 Scan Cab is available"
  }
}