Windows message center

Generally available today, Windows Server 2025 builds on the Microsoft mission to deliver a secure and high-performance Windows Server platform tailored to meet diverse business needs. Windows Server 2025 offers advanced security, improved performance, and cloud agility. This release will enable IT administrators to deploy apps in any environment, whether on premises, hybrid environments, or in the cloud.   

This platform features advanced multilayered security, modern hybrid cloud capabilities, and the ability to handle the most demanding workloads, including AI and machine learning. To learn more, read the complete announcement on the Windows Server Blog. 

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Read this month’s recap of improvements in Windows client and server security, device and update management, AI, productivity, and collaboration.  

Get started with Windows 11, version 24H2 feature update, cybersecurity resources, Windows Protected Print mode, Copilot+ PC updates, Windows Admin Center for Windows Server, and other improvements released in October. 

As the end of support for Windows 10 approaches, Microsoft wants to ensure you are well-prepared for the transition to Windows 11. This end of support on October 14, 2025* marks an important step in our mission to provide the most modern and secure computing experience possible for you, whether at work, school, or home. It also reflects our commitment to continually improving Windows security as part of Microsoft Secure Future Initiative.  

Today we published a new blog post to help you prepare for Windows 10 end of support and outlined options for moving to Windows 11. The options include:   

*Note: Long-Term Servicing Branch (LTSB) and Long-Term Servicing Channel (LTSC) releases are subject to different lifecycle support policies. Check out the Microsoft lifecycle website for more information.  

The October 2024 non-security preview update is now available for Windows 11, version 24H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

With Windows 11, version 24H2, you get reduced installation time, restart time, and central processing unit (CPU) usage for Windows monthly updates. Additionally, feature updates now have smaller download sizes. That’s due to the extension of conditional downloads to Microsoft Edge. Learn about the details behind these improvements in a new article, Windows 11, version 24H2 improved update fundamentals.

Your opinion matters! There's still time to participate in our survey to help improve the design and utility of the Windows release health site. Windows release health offers official information on Windows announcements, updates, servicing milestones, known issues, safeguards, and helpful resources. Your anonymous feedback will help us prioritize improving the features that are most important to you.

Our short survey will just take a couple of minutes of your time. Get started here: Windows release health website feedback.

The October 2024 non-security preview update is now available for Windows 11, versions 23H2 and 22H2, and Windows 10, version 22H2. The non-security preview update for Windows 11, version 24H2 will be available soon. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the October 17th session of Office Hours? RSVP on the event page and click here to add it to your calendar. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The October 2024 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

Starting today, October 8, 2024, Windows 11, version 21H2 (Enterprise, Education, and IoT Enterprise editions) and Windows 11, version 22H2 (Home and Pro editions) have reached end of servicing. The October 2024 security update is the last update available for these editions. After today, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 11 Home and Pro devices that are not managed by IT departments when these are nearing end of servicing. Moving to the latest version of Windows 11 keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.

For detailed information, see the Windows 11 Enterprise and Education, Windows 11 IoT Enterprise, and Windows 11 Home and Pro lifecycle pages. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Windows updates dated April 9, 2024, or later add new behaviors that start the process of addressing a security risk in the Kerberos PAC Validation Protocol. These improvements are deployed in three phases (see below). The timeline of the second phase, Enforced by Default, has changed. This phase will occur in January 2025.

To help protect your environment, see KB5037754: How to manage PAC Validation changes related to CVE-2024-26248 and CVE-2024-29056.

Today we begin to release the Windows 11 2024 Update (also known as Windows 11, version 24H2) and announce new Copilot+ PC innovations that enable you to engage with your device in a natural, conversational way. The Windows 11 2024 Update contains new features to help deliver transformational AI experiences and exceptional performance. You can learn more about all the new features, including enhanced battery saver, Bluetooth LE Audio, HDR background support, and support for Wi-Fi 7 in What’s new inside this update. 

We are taking a phased approach with the 2024 Update rollout, based on when data shows your device is ready and you will have a great experience. We will begin with eligible devices running Windows 11, version 22H2 and 23H2 for those who have previously opted in to be amongst the first to experience new enhancements. (How can you be among the first to experience new features? Navigate to Settings > Windows Update, and turn on “Get the latest updates as soon as they’re available.”) For more information on ways to get the update, see How to get new experiences for Windows 11 and watch this video. 

IT administrators are encouraged to review What’s new for IT pros in Windows 11, version 24H2 for detailed information on commercial release channels, deployment tools, and enhancements for enterprises. 

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Read this month’s recap of improvements in Windows client and server security, device and update management, Microsoft Copilot, productivity, and collaboration. Get started with the unified Windows Autopatch solution, new update compliance alerts in Microsoft Intune and Windows Update for Business reports, security improvements for Copilot+ PCs and Windows Server, new app solutions, among others. Additionally, try preview opportunities for Azure Arc-connected hotpatching for Windows Server 2025 and other improvements released in September. 

The September 2024 non-security preview update is now available for Windows 11, versions 23H2 and 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

The September 2024 non-security preview update is now available for Windows 10, version 22H2. The non-security preview update for Windows 11, versions 23H2 and 22H2 will be available soon. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

If you manage Windows updates for your enterprise, you can do so with a single solution, Windows Autopatch. The functionality formerly known as Windows Update for Business deployment service has been woven into Windows Autopatch. A new, unified dashboard in the Microsoft Intune admin center now has four main sections: update policies, update groups, update status, and update reports. Your current license rights and functionalities under either Windows Autopatch or Windows Update for Business deployment service will remain the same. Learn more at Consolidating update management for enterprises.

If you are a domain administrator for your organization, learn about the latest changes to certificate-based authentication. On September 10, 2024, changes to the Full Enforcement mode key dates were made to reflect new dates. In February 2025 or later, devices will move to Full Enforcement mode. However, you can move back to Compatibility mode until September 2025. Full registry key support will now end in September 2025.

For more information, see KB5014754: Certificate-based authentication changes on Windows domain controllers.

If you use Microsoft Intune to deploy Windows updates in your organization, streamline your reporting with two new device alerts. You can now find and troubleshoot devices that aren’t reporting correct update progress because they aren’t sending diagnostic data. The new alerts are DeviceDiagnosticDataNotReceived and MinimumOSBuildNotMet. Learn what they mean, where to find them in Microsoft Intune, and how to remediate the underlying issues. Get all the details in New alerts for Windows updates in Microsoft Intune.

We are ramping up data protection to help organizations advance their security goals while ensuring that people have seamless access to the AI productivity tools they need to stay ahead of the curve. With this effort, Copilot experiences in Windows are changing for managed PCs running Windows 11 Pro or Enterprise. Explore enhanced data protection with Windows and Microsoft Copilot. Looking for more information on today’s Microsoft 365 Copilot announcements? Get to know the next phase of Microsoft 365 Copilot innovation.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the September 19th session of Office Hours? RSVP on the event page and click here to add it to your calendar. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The September 2024 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

On October 8, 2024, Windows 11, version 21H2 (Enterprise, Education, and IoT Enterprise editions) and Windows 11, version 22H2 (Home and Pro editions) will reach end of servicing. The upcoming October 2024 security update, to be released on October 8, 2024, will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 11 Home and Pro devices that are not managed by IT departments when these are nearing end of servicing. Moving to Windows 11, version 23H2 keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.

For detailed information, see the Windows 11 Enterprise and Education, Windows 11 IoT Enterprise, and Windows 11 Home and Pro lifecycle pages. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

The August 2024 non-security preview update is now available for Windows 10, version 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Read this month’s recap of improvements in Windows security, device and update management, Windows Server, productivity, and collaboration. Get started with the new Windows 365 features and offerings, security improvements, as well as solutions for specific scenarios in Windows Autopatch, Microsoft Intune, and app management, among others. Additionally, find preview opportunities for Windows Server 2025 hotpatching, the new Windows App, and other improvements released in August. 

Visit our updated learning series on all things Windows. This month, we published the following learning bites: 

Our growing skilling snack library now contains 44 learning journeys. Each one of these consists of specially selected articles, videos, and other resources, designed for you to consume in about two hours or less. This professional development opportunity is appropriate for all skill levels and is updated every other week. 

The August 2024 non-security preview update is now available for Windows 11, versions 23H2 and 22H2. The non-security preview update for Windows 10, version 22H2 will be available soon. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

If you use Windows Autopatch to manage Windows updates in your organization, you can sometimes experience deployment issues due to conflicts with Microsoft Intune policies. These issues are common in environments that rely on Configuration Manager (ConfigMgr) and Group Policy Objects (GPO). When this happens, you can use PowerShell detection and remediation scripts to easily rectify the problem. Read more about our recommended solution in Windows Autopatch: Auto-remediation with PowerShell scripts. This solution is for you if you currently use Microsoft Intune and don’t use third-party application patching solutions with Configuration Manager.

Follow the new guidelines to deploy changes across enterprises and understand how the new Windows Boot Manager self-revocation works. These new guidelines are part of a plan with five phases to deploy protections against the publicly disclosed Secure Boot security feature bypass (CVE-2023-24932).

The Deployment Phase is now in effect and documented in the updated KB5025885. The July 2024 Windows security update adds support for Secure Version Number (SVN) to block older Boot Managers. Additionally, learn how to set the updated SVN in the firmware.

The new Boot Manager deployed in the July update has a new self-revocation feature built in. When the Boot Manager starts to run, it performs a self-check by comparing the SVN that is stored in the firmware with the SVN built into the Boot Manager.

Learn more at KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932.

Please take a moment to participate in this quick survey to help us improve the design and utility of the Windows release health site. Windows release health offers official information on Windows announcements, updates, servicing milestones, known issues, safeguards, and helpful resources. Your anonymous feedback will help us prioritize improving the features that are most important to you. Get started here: Windows release health website feedback.

IT admins should be aware of a security risk that exists in the Remote Authentication Dial-In User Service (RADIUS) protocol. MD5 collision problems affect User Datagram Protocol or UDP-based RADIUS traffic over the internet. Data packets are at risk of forgery or changes to them during transit. For more information, see CVE-2024-3596 and KB5040268.

Note This security risk requires physical access to the RADIUS network and the Network Policy Server (NPS). Also, the risk does not apply when RADIUS traffic goes over VPN.

As of July 9, 2024, Windows updates support the Message-Authenticator attribute in Access-Request packets. The new RADIUS standards mandate this change.

However, if you install the July 2024, or later, updates, NPS connection failures can happen. This update does not cause these connection failures. This only occurs if your company’s firewall or RADIUS solution does not support this attribute. To learn more, see KB5043417.

We recommend that you enable the Message-Authenticator attribute in Access-Request packets. Doing this addresses the security risk and the NPS issue. To learn more, see KB5040268.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the August 15th session of Office Hours? RSVP on the event page and click here to add it to your calendar. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The August 2024 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

On October 8, 2024, Windows 11, version 21H2 (Enterprise, Education, and IoT Enterprise editions) and Windows 11, version 22H2 (Home and Pro editions) will reach end of servicing. The upcoming October 2024 security update, to be released on October 8, 2024, will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 11 Home and Pro devices that are not managed by IT departments when these are nearing end of servicing. Moving to Windows 11, version 23H2 keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.

For detailed information, see the Windows 11 Enterprise and Education, Windows 11 IoT Enterprise, and Windows 11 Home and Pro lifecycle pages. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Read this month’s recap of improvements in Windows security, device management, Windows Server, productivity and collaboration, lifecycle milestones, and preview opportunities. Get started with Secure Boot protections, checkpoint cumulative updates, security baselines and cross-region disaster recovery for Windows 365, Windows Server preview opportunities, IoT LTSC, and other improvements released in July. 

Visit our updated learning series on all things Windows. This month, we published the following learning bites: 

Our growing skilling snack library now contains 42 learning journeys. Each one of these consists of specially selected articles, videos, and other resources, designed for you to consume in about two hours or less. This professional development opportunity is appropriate for all skill levels and is updated every other week.

The broad, open nature and scale of the Windows computing ecosystem is part of what makes it a powerful and unmatched choice across the globe. The recent CrowdStrike incident underscores the need for mission-critical resiliency within every organization, and our unique ability to support the change required. This incident shows that Windows must prioritize change and innovation in the area of end-to-end resilience. Our goal is to be your trusted partner as you leverage technology and the end-to-end Microsoft stack to deliver amazing value for your workforce, your customers, and your partners. Read more about how we are working in close cooperation to improve resiliency across the Windows ecosystem and explore best practices you can use to support resiliency in your organization. 

Updated on July 25, 2024: Microsoft released further guidance on Windows resiliency: Best practices and the path forward. Read more about how we are working in close cooperation to improve resiliency across the Windows ecosystem and explore best practices you can use to support resiliency in your organization.

Updated on July 22, 2024: Microsoft has released a third mitigation option for the CrowdStrike Falcon agent issue impacting Windows clients and servers. If devices are unable to recover with the two previous options, IT admins can use PXE to remediate. See the revised New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints for detailed instructions on prerequisites and configurations to use PXE Recovery.

Updated on July 21, 2024: As a follow-up to the CrowdStrike Falcon agent issue impacting Windows clients and servers, Microsoft has released an updated recovery tool with two repair options to help IT admins expedite the repair process. Based on customer feedback, this new release includes a new option for recovery using safe boot, the option to generate ISO or USB, a fix for ADK detection when the Windows Driver Kit is installed, and a fix for the USB disk size check. See the revised New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints for detailed instructions on using the signed Microsoft Recovery Tool.

Updated on July 20, 2024: Microsoft has released KB5042426, which contains step-by-step guidance for Windows Servers hosted on-premises that are running the CrowdStrike Falcon agent and encountering a 0x50 or 0x7E error message on a blue screen. We will continue to work with CrowdStrike to provide the most up-to-date information available on this issue. 

A new USB Recovery Tool is available to help IT admins expedite the repair process. The new tool can be found in the Microsoft Download Center. Read more about the new recovery tool and usage instructions at New Recovery Tool to help with CrowdStrike issue impacting Windows endpoints.

Updated on July 19, 2024: A new Knowledge Base article, KB5042421, with additional step-by-step guidance is now available for Windows 11 and Windows 10 clients. We will continue to work with CrowdStrike to provide up-to-date mitigation information as it becomes available.

Microsoft has identified an issue impacting Windows endpoints that are running the CrowdStrike Falcon agent. These endpoints may encounter an error message on a blue screen and experience a continual restarting state.

We have received reports of successful recovery from some customers attempting multiple restart operations on affected Windows endpoints.

To mitigate this issue, follow these steps:

For Windows Virtual Machines running on Azure follow the mitigation steps in Azure status.

Additional details from CrowdStrike are available here: Statement on Windows Sensor Update - CrowdStrike Blog.

The July 2024 non-security preview update is now available for Windows 11, versions 23H2 and 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

The July 2024 non-security preview update is now available for Windows 10, version 22H2. The non-security preview update for Windows 11, versions 23H2 and 22H2 will be available soon. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

In late 2024, checkpoint cumulative updates will be introduced for devices running Windows 11, version 24H2 or later and Windows Server 2025. This means that updating your Windows devices will involve smaller update files, resulting in a quicker and more efficient update experience. You will begin to receive checkpoint cumulative updates automatically, with no action required from you. Today, you can preview this experience in Windows Insider’s Preview Build 26120.1252 (Dev Channel).

Read more in Introducing Windows 11 checkpoint cumulative updates.

Starting October 15, 2024, the Enforced by Default phase of Kerberos PAC signature validation mitigation begins. This second phase will move all Windows domain controllers and clients in the environment to Enforced mode, enforcing the secure behavior by default. The Enforced by Default settings can be overridden by an Administrator to revert to Compatibility mode.

To help protect your environment and prevent outages, see KB5037754: How to manage PAC Validation changes related to CVE-2024-26248 and CVE-2024-29056.

If you’re an IT pro using Windows Management Instrumentation Command line (WMIC), learn how to install it as a Feature on Demand (FoD). It’s a temporary solution while you migrate to PowerShell or a similar tool as WMIC undergoes deprecation. A new article shows you how to check if you have WMIC as a FoD and how you can install it if you don’t. Remember that later this year, WMIC FoD will be disabled by default on the next version of Windows 11 and Windows Server. Read more at How to install WMIC Feature on Demand on Windows 11.

The July 2024 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

REMINDER The October 2024 security update is the last security release for Enterprise and Education editions of Windows 11, version 21H2 and Home and Pro editions of Windows 11, version 22H2. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats. Supported editions of Windows 11, versions 23H2 and 22H2 will continue to have support through their specific lifecycle dates, which can be found at the Windows 11 release information page.

On October 8, 2024, Windows 11, version 21H2 (Enterprise, Education, and IoT Enterprise editions) and Windows 11, version 22H2 (Home and Pro editions) will reach end of servicing. The upcoming October 2024 security update, to be released on October 8, 2024, will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 11 business devices not managed by IT departments when these are nearing end of servicing. Moving to Windows 11, version 23H2 keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.

For detailed information, see the Windows 11 Enterprise and Education, Windows 11 IoT Enterprise and Windows 11 Home and Pro lifecycle pages. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

If your organization uses driver synchronization updates via Windows Server Update Services (WSUS), get ready for change. WSUS is planning to deprecate its driver synchronization feature on April 18, 2025. This lifecycle update is due to the availability of today’s cloud-based driver services. 

  

Drivers will continue to be made available on the Microsoft Update catalog, but you will no longer be able to import them into WSUS. If you wish to continue operating your network on-premises, you will need to use an alternative means to import drivers and distribute them across your devices. We recommend Device Driver Packages for this purpose.  

  

Read the full announcement at Deprecation of WSUS driver synchronization.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Read this month’s recap of improvements in Windows security, device management, Windows Server, and productivity and collaboration. And since you’ve asked, we’ve included sections on lifecycle milestones and preview opportunities. You can now improve your management and security strategy with innovations across Microsoft Intune, Windows Hello, Windows Autopatch, Windows Server, Copilot+ PCs, Windows Settings, and more. 

A new Windows 11 feature is available to help you manage your company’s policies using mobile device management (MDM). Starting with the May 2024 non-security update, you can now use Config Refresh to configure policy refresh timing to be as short as 30 minutes or as long as 24 hours. This helps improve security and compliance as you monitor that settings don’t drift from your intent. Learn how you can use the Microsoft Intune Settings Catalog to manage Config Refresh and troubleshoot it in the Event Viewer. Find more details in Intro to Config Refresh – a refreshingly new MDM feature.

Visit our updated learning series on all things Windows. This month, we published the following learning bites: 

Our growing skilling snack library now contains 40 learning journeys. Each one of these consists of specially selected articles, videos, and other resources, designed for you to consume in about two hours or less. This professional development opportunity is appropriate for all skill levels and is updated every other week. 

The June 2024 non-security preview update is now available for Windows 11, versions 23H2 and 22H2 and Windows 10, version 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Please take a moment to participate in this quick survey to help us improve the design and utility of the Windows release health site. Windows release health offers official information on Windows announcements, releases and servicing milestones, known issues and safeguards, and helpful resources. This anonymous survey will help us focus on what matters most to you. Get started here: Windows release health website feedback.

Microsoft has identified an issue wherein Azure Synapse SQL Serverless Pool databases enter a "Recovery pending" state, and has expedited a resolution. This issue is observed after installing the June 2024 Windows security update on Windows Server 2022 (KB5039227), Windows Server, version 23H2 (KB5039236), and Azure Stack HCI versions 23H2 and 22H2 (KB5039227). An out-of-band (OOB) update has been released for Windows Server 2022 and Azure Stack HCI, version 22H2 today, June 20, 2024, to address this issue. The resolution for the other platforms affected by this issue will be available in future Windows updates. 

The OOB updates for Windows Server 2022 and Azure Stack HCI, version 22H2 are available on the Microsoft Update Catalog only. These are cumulative updates, so you do not need to apply any previous update before installing them, and they supersede all previous updates for affected versions. Installation of this OOB will require a device restart. If you haven’t deployed the June 2024 Windows security update yet, we recommend you apply this OOB update instead. For more information and instructions on how to install this update on your device, consult the below resources for your version of Windows:

Today, we’re excited to share more information about our new advanced AI experiences that enable you to do things you can’t on any other PC, helping you be more productive, creative and communicate more effectively. These experiences are only available on new Copilot+ PCs, which are generally available beginning today, June 18.

To learn more, see How to unlock new experiences on your Copilot+ PC. For Microsoft Surface news, see Top things to know about Copilot+ PCs from Microsoft Surface, available today at Microsoft.com.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the June 20th session of Office Hours? RSVP on the event page and click here to add it to your calendar. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The June 2024 security update is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

REMINDER The June 2024 security update is the last security release for Enterprise, Education, and IoT Enterprise editions of Windows 10, version 21H2. Windows 10, version 22H2, will be the final version of Windows 10, and all editions will remain in support with monthly security updates through October 14, 2025. Enterprise and IoT Enterprise LTSB/LTSC editions will continue to have support through their specific lifecycle dates, which can be found at the Windows 10 release information page.

As of June 11, 2024, Enterprise, Education, and IoT Enterprise editions of Windows 10, version 21H2 have reached end of servicing. The June 2024 security update, released on June 11, 2024, is the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 business devices not managed by IT departments when these are at, or within several months of reaching, end of servicing. Moving to Windows 10, version 22H2 keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.

As always, we recommend that you upgrade eligible devices to Windows 11. For detailed information, see the Windows 10 Enterprise and Education and Windows 10 IoT Enterprise lifecycle pages. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Windows 10 Enterprise LTSC 2021 and Windows 10 IoT Enterprise LTSC 2021 will continue to have mainstream support until January 12, 2027.

If you’re an IT admin considering moving to Windows 11 and cloud-native management, you can effectively pursue both efforts in parallel. See five misconceptions and practical steps that you can take to help move your organization forward. First, there’s the misconception that to deploy Windows 11, you must also go full cloud native. Secondly, many wrongly think that a name change must mean a bigger change. The third myth is about application compatibility risks. The final two ideas involve business productivity and cost of ownership. Make informed decisions to modernize your environment by reading Myths and misconceptions: Windows 11 and cloud native.

Today, we are sharing an update on the Recall (preview) feature for Copilot+ PCs, including more information on the setup experience for Recall, privacy controls, and additional details on our approach to security. 

Recall is a new way to instantly find something you’ve previously seen on your PC. To create an explorable visual timeline and find content on your Copilot+ PC with Recall, Windows periodically takes a snapshot of what appears on your screen. These images are encrypted, stored, and analyzed locally using on-device AI capabilities to understand their context.  

We are updating the set-up experience of Copilot+ PCs to give you a clearer choice to opt in to save snapshots using Recall. If you don’t proactively choose to turn it on, it will be off by default. Additionally, Windows Hello enrollment is required to enable Recall. To learn more about privacy controls and protections in Copilot+ PCs, read Update on the Recall Preview Feature for Copilot+ PCs. 

If you use the Azure Update Delivery service tag to scan for Windows updates at your organization, get ready for change. Azure Firewall service tags are collections of IP addresses and ranges associated with a named resource. The Azure Update Delivery tag is being deprecated starting July 1, 2024. Instead, we recommend using Azure Firewall application rules. Read a new article that provides further context and next steps for various scenarios. 

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. This May, there are several new ways to help you improve your management and security strategy. Read this month’s recap to get started with improvements in Windows security, device management, Copilot, Windows Server, and productivity and collaboration. There are innovations across many of your familiar tools, including Microsoft Intune, Windows Autopatch, Windows Server, Copilot in Windows, and Windows Settings. 

The May 2024 non-security preview update is now available for Windows 11 and all supported versions of Windows 10. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

REMINDER The June 2024 security update is the last security release for Enterprise, Education, and IoT Enterprise editions of Windows 10, version 21H2. Windows 10, version 22H2, will be the final version of Windows 10, and all editions will remain in support with monthly security updates through October 14, 2025. Enterprise and IoT Enterprise LTSB/LTSC editions will continue to have mainstream support until January 12, 2027.

Visit our updated learning series on all things Windows. In April and May, we published the following learning bites: 

Our growing topics library for personalized learning now contains 38 learning journeys: Windows skilling snacks: bite-sized learning for IT pros. This is where we package available resources on different topics in a way that is easy to consume in under two hours each. This professional development opportunity is appropriate for all skill levels and is updated every other week. 

If you use Windows Update for Business reports, you may have noticed that devices will occasionally fail to send diagnostic data and end up missing from your reports. A newly released “DeviceDiagnosticDataNotReceived” alert helps you identify missing devices so that they are not overlooked for important troubleshooting. You can use either Log Analytics or Windows Update for Business reports to locate your missing devices. Learn how in Missing devices in Windows Update for Business reports?

Microsoft has identified an issue wherein the May 2024 Windows security update might fail to install and has expedited a resolution. An Out-of-band (OOB) update has been released for the affected versions of Windows today, May 23, 2024, to address this issue. This issue is observed only in Windows 10 Enterprise and IoT LTSC 2019 editions and Windows Server 2019.

The OOB update released to address this issue is available on all usual release channels. This update is cumulative, so customers do not need to apply any previous update before installing it, as it supersedes all previous updates. This update does not contain any additional security updates from those available in the 5B update. Installation of this OOB will require a device restart. If you haven’t deployed the May 2024 security update yet, we recommend you apply this OOB update instead. For more information and instructions on how to install this update on your device, consult the below resources for your version of Windows:

VBScript is being deprecated. VBScript is a coding language that has been widely used by developers to add dynamic interactivity and functionality to web pages.

Deprecation will happen in three phases, beginning in the second half of 2024, in which VBScript will be available as features on demand (FODs). The following phase is not planned until 2027 or later, allowing websites and apps running on VBScript ample time to migrate. We recommend moving your VBScript-dependent resources to either PowerShell or JavaScript before this time. Learn more in VBScript deprecation: Timelines and next steps.

If you’re an IT admin using the Windows Update for Business deployment service, you now have greater control over how feature updates are rolled out to your organization. You can now designate Windows feature updates as optional, allowing for more flexible installations, greater risk management, and minimal disruption to workflow. This feature is rolling out between May 21-24, 2024. Learn how to use Microsoft Intune to configure these deployments in More flexible Windows feature updates.

Microsoft is revolutionizing the PC for AI era with the Copilot+ PC. Utilizing powerful new silicon with a neural processing unit (NPU) capable of more than 40 trillion operations per second, Copilot+ PCs can give you time back in your day so you can be more creative, more strategic, and more innovative. They can also unlock productivity with features like Recall, live captions with translation, and Windows Studio Effects. Get to know these new, business-ready devices and the benefits they can provide for organizations of all sizes. 

Learn how to use the Windows updates API, which is part of Microsoft Graph, to programmatically access Windows information that is published here on the Windows release health site. The recording of our recent webinar is now available on the Windows IT Pro YouTube channel.

In response to customer feedback about the need for faster, automated access to information about Windows updates, two new data classes have been released for Windows updates API, allowing access to Windows known issues and product lifecycle in Graph API. In our webinar, we review use cases, helpful resources to get started, and discuss how this feature can work for you and your organization. Watch now on YouTube: Windows known issues and product lifecycle in Graph API.

The May 2024 security update is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

REMINDER The June 2024 security update is the last security release for Enterprise, Education, and IoT Enterprise editions of Windows 10, version 21H2. Windows 10, version 22H2, will be the final version of Windows 10, and all editions will remain in support with monthly security updates through October 14, 2025. Enterprise and IoT Enterprise LTSB/LTSC editions of version 21H2 will continue to have mainstream support until January 12, 2027.

On June 11, 2024, Enterprise, Education, and IoT Enterprise editions of Windows 10, version 21H2 will reach end of servicing. The upcoming June 2024 security update, to be released on June 11, 2024, will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 business devices not managed by IT departments when these are nearing end of servicing. Moving to Windows 10, version 22H2 keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.

As always, we recommend that you upgrade eligible devices to Windows 11. For detailed information, see the Windows 10 Enterprise and Education and Windows 10 IoT Enterprise lifecycle pages. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Windows 10 Enterprise LTSC 2021 and Windows 10 IoT Enterprise LTSC 2021 will continue to have mainstream support until January 12, 2027.

Weak RSA key lengths for certificates will be deprecated on future Windows OS releases later this year. We recommend you use a stronger solution of at least 2048 bits length or an ECDSA certificate, if possible. Support for the RSA algorithm itself won’t be affected. Find details and recommended next steps in TLS server authentication: Deprecation of weak RSA certificates. 

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the May 16th session of Office Hours? RSVP on the event page and click here to add it to your calendar. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.