Microsoft ships KB5121767 after blocking KB5101650 on some Dell PCs

Microsoft has released KB5121767, an out-of-band Windows 11 update for affected Dell devices that were temporarily blocked from the July 2026 security update. The fix targets systems with an Intel Innovation Platform Framework driver that could see changes in performance, power consumption, or system behavior after recent Windows updates.

This is a narrow update, but the timing matters. KB5101650 was the main July security update for Windows 11 versions 24H2 and 25H2, and Microsoft says the out-of-band package now lets the affected Dell devices install the security baseline again.

KB5121767 is only for affected Windows 11 devices

Microsoft's support note describes KB5121767 as a cumulative out-of-band update for Windows 11 version 25H2 and version 24H2. It includes prior security and non-security improvements plus one additional fix for the Intel IPF driver issue.

The company is clear about scope: if a device is not affected, no action is required. That makes this a deployment-targeting problem rather than a universal Windows update mandate. Endpoint teams should avoid pushing the out-of-band package blindly across unaffected fleets unless their normal Windows Update policy selects it.

The new builds are 26200.8894 and 26100.8894. Microsoft also says KB5121767 includes KB5120102, a servicing stack update intended to improve reliability of the Windows update installation process.

Why KB5101650 was blocked for some Dell systems

The original July 14 update, KB5101650, moved Windows 11 version 25H2 to build 26200.8875 and version 24H2 to build 26100.8875. Microsoft later noted that the update was temporarily unavailable for a limited number of Dell devices using Intel IPF drivers because of an incompatibility with an Intel component.

Windows Central reported the user-visible symptoms as unexpected shutdowns, poor performance, increased heat, and battery drain. Microsoft's own KB5121767 note frames the impact more broadly as performance, power consumption, or system-behavior changes.

For managed fleets, the risk is not only the bug. It is also the gap created when security updates are blocked for a device class. If those Dell systems missed KB5101650, KB5121767 is now the path back to the July security baseline.

How Microsoft is delivering the fix

Devices with "Get the latest updates as soon as they're available" enabled should receive KB5121767 automatically through Windows Update. If that toggle is off, Microsoft says users can install it through Settings, Windows Update, Download & Install. The update is also available through the Microsoft Update Catalog.

Microsoft's standalone installation instructions include a detail that matters for offline servicing and image maintenance: KB5121767 may contain multiple MSU files that need to be installed in the right order. Microsoft's example lists the baseline package first, then the KB5121767 package.

That makes this update worth routing through the normal endpoint-management process rather than manual one-off repair. Intune, ConfigMgr, Windows Update for Business, or a managed catalog workflow should be able to target affected hardware more cleanly than broad manual installs.

What endpoint teams should verify

First, identify Dell devices that were held back from KB5101650 or show the Intel IPF-related symptoms after recent Windows updates. Then confirm whether they are on Windows 11 24H2 or 25H2 and whether KB5121767 appears through the normal update channel.

Second, check compliance reports after installation. The goal is not only to resolve power or performance behavior; it is to bring the device back to the July 2026 cumulative security level. Machines stuck before KB5101650 should remain visible until the out-of-band update lands.

Finally, keep this separate from the broader July Patch Tuesday story. KB5121767 is not a replacement decision for every Windows 11 endpoint. It is a targeted recovery update for affected Dell systems, and Microsoft's own note says unaffected devices do not need action.

Evidence

Microsoft's KB5121767 support page is the primary source for the out-of-band update, affected Windows 11 versions, build numbers, delivery paths, and the Intel IPF driver explanation. Microsoft's KB5101650 page confirms the original July security update and the temporary Dell-device availability issue. Windows Central independently reported the Dell rollout block and the user-visible symptoms that made the out-of-band fix necessary.

The practical next step is inventory, not panic: find the affected Dell systems, install KB5121767 through a managed channel, and verify those devices are back on the July security baseline.