Skip to content
anavem.com logoanavem.com logo
About
LatestAll updates
ResolvedMicrosoft Windows 11 23H2Medium priorityNewsMicrosoft

KB5082052 Adds Secure Boot Status and RDP Protection to Windows 11 23H2

April 2026 Patch Tuesday for Windows 11 23H2 adds Secure Boot certificate status in Windows Security, RDP file phishing protection, fixes the Microsoft account sign-in bug, and updates the vulnerable driver blocklist.

By Emanuel De Almeida

3 min readUpdated
Update KB5082052, which adds Secure Boot status visibility and enhanced Remote Desktop Protocol protection to Windows 11.
On this page

Key takeaways

  • Build 22631.6936. Mandatory Patch Tuesday security update.
  • Secure Boot certificate status now visible in Windows Security app.
  • RDP files show all connection settings before connecting, with settings off by default.
  • Fixes Microsoft account 'no Internet' sign-in bug affecting Teams and other apps.
  • Known issues: BitLocker recovery with PCR7 Group Policy, RDP warning display on multi-monitor.

What to do now

Medium urgency
  1. Install KB5082052 or its successor KB5093998 (latest).
  2. Audit BitLocker Group Policy for PCR7 inclusion before deploying.
  3. Update backup applications if they use blocked kernel drivers.

Microsoft released KB5082052 on April 14, 2026, the April Patch Tuesday cumulative update for Windows 11 23H2 (Build 22631.6936). Per Microsoft's KB article, the update adds Secure Boot certificate status in the Windows Security app, new RDP file phishing protection that shows connection settings before connecting, and fixes a Microsoft account sign-in bug that blocked Teams access with a false 'no Internet' error.

The RDP phishing protection is the most significant security change: .rdp files now display all requested connection settings before connecting, with each turned off by default. The vulnerable driver blocklist update may cause backup app failures for organizations using older drivers.

KB5082052 adds Secure Boot status, RDP phishing protection, and fixes the MS account sign-in bug on Windows 11 23H2.

Mandatory April Patch Tuesday. Secure Boot cert status in Windows Security, RDP phishing protection (settings off by default), MS account sign-in fix (no more Teams 'no Internet' error), vulnerable driver blocklist update. Known issues: BitLocker recovery, RDP multi-monitor warning.

Affected & context

Event summary

Microsoft released KB5082052 on April 14, 2026, the April Patch Tuesday for Windows 11 23H2 (Build 22631.6936). It adds Secure Boot certificate status in Windows Security, RDP file phishing protection, fixes the MS account sign-in bug, and updates the vulnerable driver blocklist.

Why it matters

RDP phishing protection hardens Remote Desktop against credential theft. The MS account sign-in fix resolves a March 2026 regression affecting Teams access.

Who is affected

Windows 11 23H2, all editions.

Vendors
Microsoft
Products
Windows 11 23H2

KB5082052 Adds Secure Boot Status and RDP Protection to Windows 11 23H2

Microsoft released KB5082052 on April 14, 2026, the April Patch Tuesday cumulative update for Windows 11 23H2. The update raises the OS build to 22631.6936. Per Microsoft's KB article, it bundles security fixes with non-security improvements from the March preview KB5078883.

New features include Secure Boot certificate update status in the Windows Security app and RDP file phishing protection that shows all connection settings before connecting, with each turned off by default. A fix resolves the Microsoft account sign-in bug where apps like Teams reported 'no Internet' despite working connectivity.

RDP Phishing Protection and Vulnerable Driver Blocklist

The RDP phishing protection is a significant security change. Per Microsoft, when you open an .rdp file, Remote Desktop now displays all requested connection settings before connecting. A one-time security warning also appears the first time you open an .rdp file.

The vulnerable driver blocklist update adds known vulnerable kernel drivers. Backup applications relying on blocked drivers may show VSS timeout or BAD_STATE errors. Update to newer application versions with protected drivers.

Windows 11 23H2, All Editions

Windows 11 23H2, all editions. Build 22631.6936. Mandatory security update. Superseded by KB5087420 (May) and KB5093998 (June). Known issues: BitLocker recovery with PCR7 Group Policy, RDP warning display on multi-monitor setups.

Timeline

  1. KB5082052 released

    April Patch Tuesday for Windows 11 23H2. Build 22631.6936.

    Source: Microsoft Support

    Confidence: High

  2. RDP warning known issue added

    Microsoft adds known issue: RDP security warnings display incorrectly on multi-monitor setups.

    Source: Microsoft Support

    Confidence: High

  3. Superseded by KB5087420

    May Patch Tuesday KB5087420 (Build 22631.7079) supersedes KB5082052. Fixes the RDP warning issue.

    Source: Microsoft Support

    Confidence: High

Impact

Mandatory security update with RDP phishing protection, vulnerable driver blocklist, MS account sign-in fix, and Secure Boot cert status. Known issues may require BitLocker recovery key.

Business impact

RDP phishing protection changes default behavior for .rdp files. Vulnerable driver blocklist may break backup apps using older drivers. BitLocker known issue affects managed devices with PCR7 Group Policy.

Affected audience: Windows 11 23H2 users and IT admins, Organizations using RDP files, Users affected by MS account sign-in bug

Action required.

Response

Vendor statement

Microsoft recommends installing this update as part of the Patch Tuesday cycle.

Response status: Patched

Patch available: Yes

Workaround available: Yes

Patch / advisory

FAQ

What does KB5082052 fix?

Secure Boot certificate status in Windows Security, RDP file phishing protection, Microsoft account sign-in bug fix ('no Internet' in Teams), SMB over QUIC reliability, and vulnerable driver blocklist update.

Does this fix the Teams 'no Internet' sign-in error?

Yes. Per Microsoft, the update fixes an issue from the March 2026 update where apps like Teams showed 'no Internet' despite working connectivity.

What are the known issues?

BitLocker recovery may be required on devices with PCR7 Group Policy. RDP security warnings display incorrectly on multi-monitor setups with different scaling. Both are addressed in later updates.

Is KB5082052 the latest update for 23H2?

No. KB5093998 (June 2026, Build 22631.7219) is the latest. KB5087420 (May) and KB5093998 supersede KB5082052.

The bottom line

KB5082052 is the April 2026 Patch Tuesday for Windows 11 23H2, adding Secure Boot cert status in Windows Security, RDP phishing protection, and fixing the MS account sign-in bug. Known issues affect BitLocker and RDP on multi-monitor setups.

RDP phishing protection and the vulnerable driver blocklist are the key security changes. Audit BitLocker PCR7 Group Policy before deploying.

What happens next

KB5087420 (May) fixes the RDP warning issue. KB5093998 (June) fixes the BitLocker recovery issue.

What to do

Install KB5093998 (latest). Audit BitLocker Group Policy for PCR7. Update backup apps if affected by driver blocklist.

Sources

  1. April 14, 2026 - KB5082052 (OS Build 22631.6936)Official

    Microsoft · Apr 14, 2026 · Primary source

    Claims supported
    • Build 22631.6936
    • Secure Boot cert status
    • RDP phishing protection
    • MS account sign-in fix
    • Driver blocklist update
    • Known issues
Reader actions
Was this helpful?
Rate this articleRate
10 readers viewed this article

Reader reviews

Rate this articleBe the first to rate
No written reviews yetRate the article above, or be the first to share your experience.