Forum Discussion

davidquez0207's avatar
davidquez0207
Copper Contributor
Oct 20, 2026

October 2026 Windows Update causing major issues

We have had about 50 computers in our organization giving boot failures after Windows restarts to apply the October update, KB5127648. Affected machines are Dell devices, both laptops and desktops. T...
configuration
deployment
Update management
Lexylent's avatar
Lexylent
Copper Contributor
Oct 27, 2026

Same issue here: Dell Pro 14 Plus PB14250 (BIOS [Version des geretteten Geräts]), Windows 11 25H2, Intune/Autopatch managed. After KB5127648 the device loops in Automatic Repair; Safe Mode and "Uninstall latest quality update" fail.

What fixed it for us:

  1. BIOS (F2) > Virtualization Support > Enable Intel Trusted Execution Technology > Off
  2. Boot into Windows and sign in (have the BitLocker recovery key ready)
  3. Back into BIOS > Intel TXT > On
  4. Boot again - the device runs normally

What our logs show:

  • Intel TXT / System Guard Secure Launch is active on every boot (Kernel-Boot/Operational event 210, SINIT).
  • The failed boots leave no trace at all: no System events, no CBS.log entries, no crash dump. The failure happens very early in boot.
  • No lsass.exe termination (event 1074), so this is not the KB5058379 TXT issue from May 2025, although the BIOS-side workaround is similar.
  • After the rollback, Windows Update reports 0x800f0845 for KB5127648.
  • On one device the build 26100/26200.9711 ran fine for two days and failed on a later restart, so it may not hit on the first reboot.

We are now piloting: switch TXT off via Dell BIOS WMI before the update reboot, switch it back on afterwards (Intune remediation). Will report results.

Has anyone else confirmed the TXT toggle? Which models and BIOS versions?

  • Jan_Kristian's avatar
    Jan_Kristian
    Copper Contributor
    Oct 30, 2026

    About the TXT toggle:

    Tried on a Lenovo X1 Gen13 today (our third failed laptop): On the first failed boot directly after installing the firmware update from Lenovo Vantage, I flipped the TXT toggle off and rebooted. Boot went fine after 1 minute of black screen at the point we normally get the logon screen. The exception to "fine" is the Windows Hello function (had to log on with password and onedrive and other services failed auto-login). Rebooted again without doing anything in Windows and flipped TXT back on. Reboot still fine, and Windows Hello played ball again and everything logged in to the M365 account without hesitation.

    I am very interested in the result of switching off TXT before installing the update as a preventive measure, confirming one or two reboots are OK after updating, and then switching TXT back on.
    Please post here when someone has tried something like that :)