Microsoft released an emergency out-of-band update for Windows 11 on March 21, 2026, to resolve widespread sign-in problems affecting Microsoft accounts in apps and services following the March 10 Patch Tuesday security release.

The update, KB5085516 (OS Builds 26200.8039 for version 25H2 and 26100.8039 for version 24H2), is cumulative and includes all fixes from the original March security update along with the specific resolution for the authentication bug. It applies to all editions of Windows 11 versions 25H2 and 24H2 that receive standard Windows updates.

Microsoft announced the issue March 20 via its Windows Release Health dashboard, stating that after installing the March 2026 security update (KB5079473), some users could not sign in to Microsoft apps and services using their Microsoft accounts. Affected applications include Teams, OneDrive, Microsoft Edge, Excel, Word, Microsoft 365 Copilot and others requiring account authentication.

Impacted devices displayed error messages indicating no internet connection, even when connected, disrupting features dependent on Microsoft account sign-in. The problem stemmed from the March cumulative update, which addressed 84 vulnerabilities across Windows and related products but introduced this unintended side effect.

The out-of-band fix, released just 11 days after Patch Tuesday, ensures rapid deployment without waiting for the next monthly cycle. Microsoft emphasized that no action is required for devices not experiencing the issue or those already updated via automatic processes. The company recommends immediate installation for affected users to restore full functionality.

This marks the latest in a series of emergency patches for Windows 11 in 2026. Earlier in the year, out-of-band updates addressed shutdown failures, Remote Desktop sign-in problems and Outlook hangs triggered by prior patches. The March incident highlights ongoing challenges in balancing comprehensive security fixes with stability in cumulative updates.

The March Patch Tuesday (March 10) fixed 84 vulnerabilities, including critical flaws in Windows components, Office, SQL Server, Azure and .NET. Two were publicly disclosed zero-days, underscoring the urgency of the release. Windows 11 versions 25H2 and 24H2 received KB5079473, advancing builds to 26200.8037 and 26100.8037, while version 23H2 got KB5078883 (Build 22631.6783).

An earlier out-of-band hotpatch (KB5084597, March 13) targeted enterprise devices in the hotpatch program using Routing and Remote Access Service (RRAS). It fixed three critical remote code execution vulnerabilities (CVE-2026-25172, CVE-2026-25173, CVE-2026-26111) that could allow attackers to execute arbitrary code remotely. The hotpatch, requiring no restart, applied only to hotpatch-enabled Windows 11 24H2, 25H2 and Enterprise LTSC 2024 devices managed via Windows Autopatch.

Microsoft clarified the RRAS hotpatch addressed a scenario where standard Patch Tuesday fixes did not fully cover hotpatched enterprise environments. Standard users were protected by the March cumulative update.

The latest sign-in fix arrives amid broader Windows 11 enhancements in 2026, including new emojis, taskbar improvements, camera controls and productivity features in March updates. Version 26H1, scoped for new devices with advanced silicon, received its March security update (KB5079466, Build 28000.1719) focusing on performance and battery life.

Users can check for the emergency update via Settings > Windows Update > Check for updates. Microsoft advises restarting after installation if prompted. Enterprise admins should monitor Windows Autopatch or WSUS for rollout.

The incident drew attention on forums like Reddit’s r/sysadmin, where IT professionals discussed impacts on Microsoft 365 ecosystems. Some reported temporary workarounds like using local accounts, but Microsoft urged against them due to lost features.

As Windows 11 evolves toward version 26H1 and beyond, Microsoft continues refining update processes to minimize disruptions. The company maintains no known exploitation of the sign-in bug in the wild, but prompt patching remains critical to prevent potential chained attacks.

For the latest status, users should visit the Windows Message Center or support.microsoft.com. Microsoft has not announced further out-of-band updates as of March 23, 2026, but monitoring continues for any emerging issues.