Windows message center

Microsoft released today a resolution for an issue observed after installing the January 2026 Windows security update. This issue may cause applications that open or save files stored in cloud‑backed locations to become unresponsive or display errors. Some installations of Outlook may also become unresponsive and fail to open when PST files are stored in cloud‑backed storage such as OneDrive.

 

An out-of-band (OOB) update was released today, January 24, 2026, to address this issue. This cumulative update includes all protections and improvements from the January 2026 Windows security update released January 13, 2026, as well as from the OOB update released on January 17, 2026 (which introduced fixes for two known issues: remote desktop connections and hibernation failures). 

This OOB update is available through Windows Update for Windows 11 devices running the updates released this month. To install it, open Settings > Windows Update, and select Download and install. Note that this update will show up in Windows Update only if you have installed one of the updates released in January that caused this issue. Some devices may install the update automatically. For supported versions of Windows Server and Windows 10, the OOB update is available from the Microsoft Update Catalog. Refer to the KB articles below for detailed information and installation steps.

IT administrators using Microsoft Intune or Windows Autopatch should follow the guidance below for installing the OOB update via Windows Update.

Save the date and tune in live, February 5 at 8:00 AM PST, and Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they start expiring in June 2026. If you've already bookmarked the Secure Boot playbook, but need more details or have a specific question, this is a great opportunity to get the answers you need to prepare for this milestone. No question is too big or too small. Experts will be on camera and in the chat to help you with update scenarios, inventorying your estate, formulating the right deployment plan for your organization, and more. Visit the event page, then select Add to Calendar. Can’t attend at that time? Post your questions early then catch up on demand.

Microsoft has identified issues upon installing the January 2026 Windows security update. To address these issues, an out-of-band (OOB) update was released today, January 17, 2026.

The out-of-band (OOB) update was released today, January 17, 2026, in the Microsoft Update Catalog. If you have not yet deployed the January 2026 Windows security update and your IT environment includes the affected applications and features, we recommend applying this OOB update instead. For more information and installation instructions, refer to the appropriate KB article for each affected version of Windows listed below. For additional guidance, see How to download updates from the Microsoft Update Catalog.

Windows updates released January 13, 2026, and later introduce the first phase of protections designed to address a Kerberos information disclosure vulnerability (CVE‑2026‑20833). This phase introduces new auditing and optional configuration controls that help reduce reliance on legacy encryption types such as RC4 and prepare domain controllers for a future shift, starting with the April 2026 update, to using AES‑SHA1 encrypted tickets by default.

During this initial deployment phase, Microsoft recommends that organizations update all Active Directory domain controllers to the January 2026 Windows security update (or later) cumulative updates. This phase enables visibility and early detection through new Kerberos audit events and a temporary registry control that allows early opt‑in to upcoming behavior changes, helping administrators identify misconfigurations or remaining dependencies before the second deployment phase begins in April 2026. Starting in April 2026, Enforcement mode will be enabled on all Windows domain controllers by default, and in July 2026 Audit mode will be removed, leaving Enforcement mode as the only option.

If your organization relies on service accounts or applications that still expect RC4-based Kerberos service tickets, this is the time to begin discovery and remediation. The audit first model ensures that environments can identify risks without triggering outages. See How to manage Kerberos KDC usage of RC4 for service account ticket issuance changes related to CVE-2026-20833 for more information on adoption timelines, recommended preparation steps, and configuration options to ensure compliance before Enforcement mode begins.

Preview the expanded Windows Backup for Organizations experience! In early 2026, if users miss the restore option during the out-of-box experience (OOBE) by accident or due to a technical issue, they can still restore at first sign-in. Windows Backup for Organizations helps preserve Windows settings, the list of installed Microsoft Store apps, and the Start menu pins. And now, even more devices can take advantage of this capability, including Microsoft Entra hybrid joined, multi-user setups, and Windows 365 Cloud PCs. Sign up for the private preview now through February 13, 2026. 

If you’re an IT admin, prepare for a two-phase hardening change related to CVE-2026-0386. The Unattend.xml file that underlies the hands-free deployment feature of Windows Deployment Services (WDS) poses a vulnerability when it’s transmitted over an unauthenticated RPC channel. Starting with the January 2026 security update, you can explicitly disable it with the help of new Event Log alerts and registry key options. In April 2026, hands-free deployment will be disabled by default. After that date, it will no longer work unless explicitly overridden with registry settings. 

The January 2026 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Note: Starting with the January 2026 security update, Windows Server 2025 will have its own KB identifiers and build numbers, separate from Windows 11, versions 24H2 and 25H2. This change improves clarity for administrators. Installation and management processes remain the same.

Windows 11, version 25H2 and Windows Server 2025 updates released on or after October 28, 2025 include a new hardening authentication mitigation for the Common Log File System (CLFS) driver. This change adds a hash-based message authentication code (HMAC) to the underlying files of a CLFS logfile. Authentication codes are generated by combining file data with a system-unique cryptographic key stored in the registry, accessible only to administrators and SYSTEM accounts. This mechanism allows CLFS to verify file integrity before parsing internal structures; if the integrity check fails, the logfile will not open.

Following installation of these updates, a mitigation adoption period - referred to as "learning mode" - will be in place for 90 days following installation of updates. During this time, authentication codes are automatically added to existing logfiles when they are opened. After this period ends, the CLFS driver will enter enforcement mode, requiring all logfiles to contain valid authentication codes. Logfiles not updated during this 90-day adoption period must be manually authenticated by an Administrator using the fsutil clfs authenticate command line utility.

Review systems that use CLFS logfiles and ensure they are opened during the 90-day learning mode period, so authentication codes are applied automatically. See Common Log File System (CLFS) Authentication Mitigation for more details on the adoption period, steps for enabling authentication, and configuration options to ensure compliance before enforcement mode begins.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the January 15 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

Start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover IT resources to prepare for Secure Boot certificate update, track and remediate CVEs in Windows Autopatch, opt in to native NVMe support in Windows Server 2025, and much more to help keep your organization protected and productive.  

Looking to grow in practical knowledge of Windows and AI? Get started with: 

With the wealth of Microsoft articles, demos, tools, and resources available, it can be difficult to know where to start or what to prioritize. Visit our updated Windows skilling snacks library to find technical learning relevant to you. These curated collections of resources cover Windows and AI, device and update management, security, accessibility and productivity, and extra bites. Each can be consumed in less than two hours. 

Microsoft has identified an issue affecting Message Queuing (MSMQ) functionality in some enterprise environments after installing the December 2025 Windows security update (released December 9, 2025). Individuals using Windows Home or Pro editions on personal devices are very unlikely to experience this issue, as it primarily affects enterprise or managed IT environments.

To address this issue, an out-of-band (OOB) update has been released, today, December 18, 2025, on the Microsoft Update Catalog. For more information and installation instructions, refer to the appropriate KB article for each affected version of Windows listed below. For additional guidance, see How to download updates from the Microsoft Update Catalog.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the December 18 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

Starting with the January 2026 security update, the AllowOOBEUpdates CSP policy will be available to IT admins and disabled by default. It shows up as a new setting on the Windows Autopilot Enrollment Status Page (ESP). This policy allows you to install the latest Windows quality updates during the out-of-box experience (OOBE) on eligible devices. Devices must be Microsoft Entra joined or Microsoft Entra hybrid joined and running Windows 11, version 22H2 or later. Read the updated announcement in Get ready for Windows quality updates out of the box as well as its accompanying documentation. 

The December 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Note A separate standalone PowerShell update is available for the versions of Windows listed below and will be offered for devices using hotpatch updates. If any PowerShell components are active during installation, a system restart will be required to complete the update.

IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there will be no December 2025 non-security preview update in the second part of the month. Normal monthly servicing for both security and non-security preview updates will resume in January 2026.

If you’re an IT admin, you can now deploy, manage, and monitor Secure Boot certificate updates using Microsoft Intune. This method represents an alternative to setting registry keys and using Group Policy. You can now use Intune to trigger deployment on all domain-joined Windows clients, opt out of high-confidence buckets, and opt in to Microsoft managing these updates. 

Read about these three settings and how to configure them. 

Join us December 10, 2025, at 8:00 AM PST for a live Ask Microsoft Anything (AMA) session focused on updating Secure Boot certificates on your Windows devices before they expire in June 2026. This event gives IT admins the chance to ask questions and get expert guidance on Secure Boot configuration, update scenarios, inventorying and preparing your environment, and formulating the right deployment plan for your organization. Members of the Windows team will be available to answer your questions, share tips, and provide insights to help you prepare devices for Secure Boot certificate deployment.

Visit the AMA: Secure Boot event page, log in to Tech Community, and post your questions in advance or during the live broadcast in the comments section. Save the date and start posting your questions early.

A new Windows Autopatch report empowers your organization to prioritize update deployment, demonstrate compliance, and maintain a robust security posture. The Common Vulnerabilities and Exposures (CVEs) report joins your other Windows quality update reports right in the Microsoft Intune admin center. Use it to view Windows CVEs addressed by recent quality updates and follow links to remediation documentation and device-level vulnerability status. Get started at New Windows Autopatch reports on CVEs. 

Catch up on Windows announcements from Microsoft Ignite, including new security and update management capabilities. Discover new tools and guidance for IT admins. Take note of important lifecycle reminders for Windows 10, Windows 11, Windows Server, and Microsoft Configuration Manager.

The November 2025 non-security preview update is now available for Windows 11, versions 25H2 and 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there will be no December 2025 non-security preview update. There will be a monthly security update for December 2025. Normal monthly servicing for both security and non-security preview updates will resume in January 2026.

On December 2, Tech Community Live presents three hours of live Ask Microsoft Anything (AMA) sessions. This is a free online event offering IT admins the opportunity to get help with managing updates, AI experiences, backup and restore options, and accessibility. Members of the Windows engineering team will be answering questions, offering tips, and providing additional insights on the announcements made at Microsoft Ignite. Save the date and post your questions early.

If you’re an IT admin managing Windows Servers, plan for removal of Windows Internet Name Service (WINS). WINS was officially deprecated since Windows Server 2022 and will be removed from all Windows Server releases following Windows Server 2025. Standard support will continue through the lifecycle of Windows Server 2025, until November 2034. We encourage you to migrate to modern Domain Name System (DNS)-based name resolution solutions before then.

The November 2025 non-security preview update is now available for all supported editions of Windows 11, version 23H2. The non-security preview update for Windows 11, versions 25H2 and 24H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there will be no December 2025 non-security preview update. There will be a monthly security update for December 2025. Normal monthly servicing for both security and non-security preview updates will resume in January 2026.

Windows is evolving to empower people to leverage the full power of AI easily, securely and confidently. Learn more about the Windows AI innovations we’re sharing at Microsoft Ignite and what they mean for your organization. Explore Windows security and resiliency innovations to help mitigate risk and learn how to scale resiliency with new recovery tools. Find out how to elevate your update experience with Windows Autopatch update readiness, quality update reports, and automatic or manual approvals for security, non-security, and out-of-band updates. Get a sneak peek at the Sysmon functionality coming natively to Windows 11 and Windows Server 2025 next year. 

Microsoft has identified an issue where some Windows 10, version 22H2 devices enrolled in Extended Security Updates (ESU) for commercial customers might fail to install the November 2025 security update (KB5068781) with error 0x800f0922 (CBS_E_INSTALLERS_FAILED). This issue is isolated to devices whose Windows OS licenses were activated via Windows subscription activation through the Microsoft 365 admin center. 

 

The organizations affected by this issue can resolve it by installing KB5072653: Extended Security Updates (ESU) Licensing Preparation Package for Windows 10, which was released on November 17, 2025. Once you install this preparation package (KB5072653), you will be able to deploy the November 2025 security update (KB5068781).

Note: A new Scan Cab including metadata for KB5072653 was made available at 12:00 pm on November 18, 2025 for organizations that utilize cab files for compliance update checks.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the November 20 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

An initial set of tools and guidance are now available to help you proactively update Secure Boot certificates on your Windows devices before they expire in June of 2026. Learn about this effort, its impact, and what you as an IT admin should do today to help ensure that your Windows devices can receive updates after June 2026 without compromising system security.

The power of automated Windows update management is coming to government SKUs. This cloud-based service has now been approved to be added to the Azure FedRAMP High Provisional Authorization to Operate. If you manage Government Community Cloud (GCC) devices, this service became part of Microsoft 365 Government this month. Read the announcement to learn about the benefits and how to get started with Windows Autopatch.  

The November 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there will be no December 2025 non-security preview update. There will be a monthly security update for December 2025. Normal monthly servicing for both security and non-security preview updates will resume in January 2026.

Today, November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) has reached end of servicing. The November 2025 monthly security update is the last update available for these editions. Devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Microsoft has identified an issue in the Windows 10 Consumer Extended Security Update (ESU) enrollment process where the enrollment wizard may fail during enrollment.

 

If you have a personal device running Windows 10 and have not yet enrolled your device in the Consumer ESU program, here are the steps you need to take to ensure you continue receiving security updates:

 

If you have a personal device running Windows 10 and have already enrolled your device in the Consumer ESU program, no additional action is needed. You will receive the November 2025 security update and future Extended Security Updates via Windows Update.

 

For more information, see KB5071959: Windows 10, version 22H2 (OS Build 19045.6466) Out-of-band.

Windows 10 devices accessing Windows 365 Enterprise Cloud PCs and Windows 365 Frontline Cloud PCs in dedicated mode are automatically entitled to ESU for the duration of the ESU offer if the user has an active Windows 365 Enterprise license assigned or Windows 365 Frontline Cloud PC in dedicated mode provisioned, certain conditions are met.

Action is required in order for these devices to install the upcoming November 2025 Windows security update, which will be available on November 11, 2025. It's necessary to act prior to this date, in order for devices to be eligible for this update. Ensure that the Windows 10 devices across your organization meet the above requirements in order to continue to be protected prior to November 11 in order to remain protected. Learn more about this change at Enable Windows 10 Extended Security Updates (ESU) for clients accessing cloud and virtual machines.

If you’re an IT admin managing Windows client and server updates, you should know about Known Issue Rollback (KIR). This well-established process automatically rolls back problematic code for a known issue in Windows non-security updates. This rollback applies automatically through Windows Update on non-IT-managed devices. IT-managed devices require a specific Group Policy configuration. Learn more about how KIR works, supported scenarios, policy templates, and more at Known Issue Rollback. 

As support for Windows 10 officially ended on October 14, 2025, it is important that devices remaining on Windows 10 stay as protected as possible through the Extended Security Updates (ESU) program. To help commercial organizations, a new guide is now available with details on where to find the Multiple Activation Key (MAK), how to activate licenses on devices, and how to prepare Windows 10 physical endpoints for users with active Windows 365 subscriptions. (Note: personal devices should instead be enrolled into the Windows 10 Consumer ESU program.)

Start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover news about the upcoming Microsoft Ignite 2025, why smaller hotpatch updates help IT pros achieve security and compliance more quickly, using policies to efficiently manage preinstalled apps, the 10 Microsoft Intune capabilities that simplify the upgrade to Windows 11, device management for frontline workers, and much more.  

The October 2025 non-security preview update is now available for Windows 11, versions 25H2 and 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there will be no December 2025 non-security preview update. There will be a monthly security update for December 2025. Normal monthly servicing for both security and non-security preview updates will resume in January 2026.

The October 2025 non-security preview update is now available for Windows 11, version 23H2. The non-security preview update will be available soon for Windows 11, versions 25H2 and 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there will be no December 2025 non-security preview update. There will be a monthly security update for December 2025. Normal monthly servicing for both security and non-security preview updates will resume in January 2026.

IT admin, you’re now more in control of provisioned Microsoft Store apps than ever. Starting this month, you can remove select in-box apps using straightforward policy on Windows 11 Enterprise or Windows 11 Education, version 25H2. The new policy, called Remove default Microsoft Store packages from the system, is disabled by default. Learn more about how it works, why it matters, the apps it applies to, and how you can configure it with Microsoft Intune or using Group Policy. Find all the details at Policy-based removal of pre-installed Microsoft Store apps. 

Microsoft has identified a remote code execution (RCE) vulnerability in the Windows Server Update Services (WSUS) reporting web service. Windows servers that do not have the WSUS server role enabled are not vulnerable to this vulnerability. For more information about the security fix, see CVE-2025-59287.

An out-of-band (OOB) update was released today, October 23, 2025, to address this issue. This is a cumulative update, so you do not need to apply any previous updates before installing this update, as it supersedes all previous updates for affected versions. If you haven’t installed the October 2025 Windows security update yet, we recommend you apply this OOB update instead. After you install the update you will need to reboot your system.

 

If you have not yet deployed the October 2025 Windows security update and your IT environment includes devices running on the versions of Windows listed below, we recommend you apply this OOB update instead:

Windows 11 now integrates AI deeply into the operating system (OS), enabling secure, scalable, and agentic work environments. Multiple new features are coming to Windows 11 devices where Copilot is available, starting with Windows Insiders in Copilot Labs. Additionally, Copilot+ PCs deliver native AI experiences with features like Click to Do, Copilot Voice, Copilot Vision, and Copilot Action. Windows 365 further extends this AI-ready environment to the cloud. When these innovative features become available to organizations, IT admins can deploy and manage them using existing tools, ensuring compliance and security. Read more at How Windows 11 and AI are transforming the future of work, as you get ready for more announcements at Microsoft Ignite in November. 

As an IT admin, use the newly published guide and tools to start updating your organization’s expiring Secure Boot certificates. As the 2011 certificate authorities (CAs) start expiring in June 2026, 2023 CAs are required. Updated CAs allow Secure Boot to continue preventing malware early in the startup sequence. Find the deployment playbook in the updated Secure Boot certificate updates: Guidance for IT professionals and organizations. Learn how to use new registry keys, Windows Event Log, and Windows Configuration System (WinCS) APIs to monitor, deploy, and troubleshoot Secure Boot CAs. 

The October 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Today, October 14, 2025, Windows 10 has reached end of support*. The October 2025 monthly security update is the final update available for the last supported versions: Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions), Windows 10 2015 LTSB, and Windows 10 IoT Enterprise LTSB 2015. Devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

*Note: Long-Term Servicing Branch (LTSB) and Long-Term Servicing Channel (LTSC) releases are subject to different lifecycle support policies. Check out the Microsoft lifecycle website for more information. 

Today, October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) has reached end of servicing. The October 2025 monthly security update is the final update available for this version. Devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Hotpatch updates, which are smaller than standard Windows updates, bring faster security and improved productivity to your organization. Their smaller size translates to optimized network performance, sustainability benefits, faster installation, and quicker compliance. Hotpatch updates build on top of the most recent quarterly baseline update and are installed without a restart. Learn more about using smaller hotpatch updates to simplify and modernize update management in Hotpatch efficiency unlocked: Smaller update size.

On November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing. The November 2025 monthly security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the October 16 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover news about Windows 11, version 25H2 general availability, advantages of Microsoft Purview and Microsoft Defender to help reduce data breaches and build resiliency, plus enhancements to Windows 365, update and driver management, productivity features, AI, and much more. Learn how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security. Get started with September 2025 improvements in Windows 11.

Does your organization use hotpatch quality update policies and want to upgrade to Windows 11, version 25H2? Plan when to upgrade because it can affect whether devices continue to receive hotpatch updates during the current hotpatch cycle. Devices that upgrade during a designated baseline release period (such as October) will remain eligible for hotpatching. Devices that upgrade during a non-baseline month (such as November) will temporarily stop receiving hotpatch updates. Instead, these devices will receive standard security updates that require a restart until the next baseline release (that is January 2026). For complete information, review the hotpatching release cycles.

Today, we announced the beginning of availability of Windows 11, version 25H2 via a controlled feature rollout. This new version is available first for users with devices running version 24H2 who have already turned on the “Get the latest updates as soon as they’re available” toggle. The phased rollout is starting gradually, and availability will expand over the next few months. Installation will be fast and easy as this update will be delivered with the same technology used for monthly security updates. Want to learn about how to update to Windows 11, version 25H2? Watch this video. 

 

Note: If we detect that your device may have an issue, such as application incompatibility, we may put a safeguard hold in place and not offer the update until that issue is resolved.  

If you are an IT administrator, see An IT pro's guide to Windows 11, version 25H2 for information on commercial release channels, deployment tools, and enhancements for commercial organizations.

The September 2025 non-security preview update is now available for Windows 11, version 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Starting with the September 2025 Windows preview non-security update, a significant leap forward in wireless networking reaches Windows 11, version 24H2 and later. Windows 11 has already supported Wi-Fi 7 for consumer access points since 2024. Now, your organization can also benefit from better speed, high throughput, improved reliability, and enhanced security for modern enterprise environments that support Wi-Fi 7 enterprise access points. Read about the benefits and how to get started in Introducing Wi-Fi 7 for enterprise connectivity. 

If you’re an IT admin, you might have questions about Windows Secure Boot certificate expiration. It’s best to update Secure Boot certificates well before the June 2026 expiration date. Check out an initial set of frequently asked questions and answers that will be updated with time. Explore different scenarios and recommendations that will help you plan and prepare. Read Frequently asked questions about the Secure Boot update process. 

The September 2025 non-security preview update is now available for Windows 10, version 22H2. The non-security preview update for Windows 11, version 24H2 will be available soon.

Note: The September 2025 non-security preview update is the final non-security preview update for Windows 10, version 22H2.

Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

The September 2025 non-security preview update is now available for Windows 11, version 23H2. The non-security preview update for Windows 11, version 24H2 and Windows 10, version 22H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

If you’re an IT admin using Windows Management Instrumentation Command-line (WMIC) tool, prepare for change. WMIC will be removed when upgrading to Windows 11, version 25H2. All later releases for Windows 11 will not include WMIC added by default. Microsoft recommends using PowerShell and other modern tools for any tasks previously done with WMIC. Note: Windows Management Instrumentation (WMI) itself remains part of Windows. Get more context and mitigation guidance at Windows Management Instrumentation Command-line (WMIC) removal from Windows.

Connecting PCs to mobile data is now simpler. The Mobile Plans app will be retired in February 2026. Instead, please use your web browser and the Windows Settings app. The web-based experience is available from your mobile operator’s portal for purchasing and activating your cellular data plans. From Windows Settings, you can consent to securely sharing your device data with your mobile operator and thus allow automatic provisioning of your eSIM and instant download and use of cellular data. Learn about what this means to users and mobile operators at Mobile Plans moves to the web. 

On October 14, 2025, Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. October 14, 2025 will also mark the end of support for Windows 10 2015 LTSB and Windows 10 IoT Enterprise LTSB 2015. The October 2025 monthly security update will be the last update available for these versions. After this date, devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates after servicing ends in October. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. The October 2025 monthly security update will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing. The November 2025 monthly security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Starting with the September 2025 security update, IT admins can configure an initial Start menu layout that users can later customize. If you’ve used the Configure Start Pins policy previously, it would revert user personalization to the IT-set configuration after a restart. The enhanced policy allows user changes to persist. This new capability is available to you through configuration service providers (CSP) today, and the Group Policy (GPO) will follow in October.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the September 18 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The September 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Note: To address an issue with Windows Powershell PSDirect connections, Microsoft recommends applying the September 2025 security update for Windows PowerShell in hotpatched devices.

Windows updates released September 9, 2025 and later, introduce security hardening changes to certificate mapping requirements in Windows Servers. Servers which run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, are now required to meet certain certificate mapping criteria in order for authentication operations to succeed. These changes address vulnerabilities discussed in CVE-2022-34691 and others.

The is the final milestone of a rollout that has gradually been taking place since 2023. Beginning with the September 9 updates, previous methods of grading enforcement across environments have been disabled. IT administrators need to take action to ensure normal operations in accordance with the new certificate mapping criteria, and install the September 9, 2025 updates. If certificates cannot be strongly mapped per the security measures following installation of this update, certain authentication operations might be denied.

As always, we recommend that you update your devices to the latest security update available to take advantage of the advanced protections from the latest security threats. For full details, see KB5014754: Certificate-based authentication changes on Windows domain controllers.

If you’re an IT admin using Windows Server Update Services (WSUS), important hardening changes are here. Starting with the September 2025 security update, WSUS running on Windows Server 2025 is removing dependencies on old code that’s no longer supported. This means that Windows operating systems (OS) that reached the end of their lifecycle will no longer qualify to receive extended security updates (ESU), unless you take additional action. Specifically, if you’re using ESUs for Windows Server 2012 and Windows Server 2012 R2, read about short-term and long-term next steps.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover enhancements to the Windows out-of-box experience (OOBE) for quality updates, Windows Backup for Organizations, hotpatching, productivity features, update and driver management, AI, and more. Learn how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security.

The August 2025 non-security preview update is now available for Windows 11, version 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Since 2023, Microsoft has been sharing reminders of changes coming to certificate mapping security requirements in Windows Servers. These changes address vulnerabilities discussed in CVE-2022-34691 and others. As part of these changes, servers which run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, will be required to meet certain certificate mapping criteria in order for authentication operations to succeed. 

The final milestone of this rollout will take place with Windows updates released September 2025. Up until the installation of this September update, it is possible to use registry keys to control the degree to which security requirements are enforced. However, after the September updates, this ability to bypass security criteria will end and these registry keys will no longer be supported. From that time on, certain authentication operations will be denied if certificates cannot be strongly mapped per the security measures. 

We recommend that IT administrators conduct testing to confirm normal operations. And as always, we advise that devices are updated to the latest security update available, to take advantage of the advanced protections from the latest security threats. For full details on these security hardenings and how to detect any related issues in your environment, see KB5014754: Certificate-based authentication changes on Windows domain controllers.

The August 2025 non-security preview update is now available for Windows 11, version 23H2 and Windows 10, version 22H2. The non-security preview update for Windows 11, version 24H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Note: The September 2025 non-security preview update will be the final non-security preview update for Windows 10, version 22H2.

Windows Backup for Organizations is now generally available. It provides a simple and secure way to back up and restore settings and the list of Microsoft Store apps on eligible enterprise devices running Windows 10 and Windows 11, version 22H2 and higher. With the capability during the out-of-the-box experience (OOBE) to restore a familiar experience on a new device or after a device reset or reimage, users can get back to work faster with less troubleshooting and higher productivity. And, if you’re still in the process of moving from Windows 10 to Windows 11, Windows Backup for Organizations can help streamline the transition. Learn more about how to get started at Windows Backup for Organizations is now available. 

Starting in September 2025, the latest Windows quality updates will be available by default during the out-of-box experience (OOBE). With Windows Autopilot and Microsoft Intune, you can manage this capability with a policy setting for eligible Microsoft Entra joined or Microsoft Entra hybrid joined devices running Windows 11, version 22H2 or higher. Additional key benefits with this new default experience? Security is enhanced from day 1, and post-deployment update overhead is reduced. Learn more about this upcoming capability, including device prerequisite details, customizable settings for the experience, and alternative management solutions for OOBE updates at Get ready for Windows quality updates out of the box.

Microsoft Secure Boot certificates will begin expiring in June 2026. To maintain a secure boot process and ensure the continued delivery of security updates, updated certificates will be released via Windows Update in the coming months. Devices that do not receive these updated certificates may stop receiving security updates and face increased vulnerability to security threats.

IT-managed environments should begin preparing now. This includes checking with OEMs for the latest available firmware updates, reviewing Microsoft’s Secure Boot certificate rollout landing page, and selecting an update path. Organizations can opt into Microsoft-managed updates, select upcoming self-service or partially automated solutions or follow the manual steps outlined in the guidance for Windows devices for businesses and organizations with IT-managed updates.

For more information on Secure Boot certificates, including the impact of this change and the actions needed to prepare, see Act now: Secure Boot certificates expire in June 2026.

Prepare for hotpatch in your environment by meeting a key requirement to enable virtualization-based security (VBS) on Windows client. With the hotpatching feature of Windows Autopatch, you can apply security updates to Windows without requiring a restart. VBS protects against kernel-level exploits and other advanced threats to help ensure your endpoints are secure and ready for patching. It’s straightforward to enable VBS, and here we’ll show you how—whether deploying at scale using Microsoft Intune or on a single device using PowerShell or Windows Command Prompt. Find step-by-step instructions to enable VBS and to validate and monitor enablement at Hotpatch readiness: Enable VBS at scale. 

Microsoft has identified an issue where some attempts to reset or recover Windows devices might fail. This issue is observed after installing the August 2025 Windows security update on some client versions of Windows. For more information on this issue, see Reset and recovery operations on some Windows versions might fail.

A non-security out-of-band (OOB) update was released today, August 19, 2025, to address this issue. This is a cumulative update, so you do not need to apply any previous updates before installing this update, as it supersedes all previous updates for affected versions. If you haven’t installed the August 2025 Windows security update yet, we recommend you apply this OOB update instead. If your device is not affected by this issue, you do not need to install this OOB update.

For more information and instructions on how to install this update on your device, consult the below resources for your version of Windows:

If you're a member of the Windows Insider Program, your Windows updates include preview features, fixes, and changes that are a part of the program. To see a list of updates that have been installed on your device, go to Settings > Windows Update > Update history. Read Understanding update history for Windows Insider preview features, fixes, and changes to help you understand the types of updates you may encounter as a Windows Insider. It also provides links to official Microsoft resources where you can learn more about each update type.

Want early access to new Windows features and improvements before they're officially released? Visit the Windows Insider Program official support page to learn how to Join the Windows Insider Program and manage Insider settings.

You can also visit the Windows Insider blog and Windows roadmap. These are great resources for IT pros, developers, and enthusiasts who want to stay up to date on what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

On October 14, 2025, Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. October 14, 2025 will also mark the end of support for Windows 10 2015 LTSB and Windows 10 IoT Enterprise LTSB 2015. The October 2025 monthly security update will be the last update available for these versions. After this date, devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates after support ends in October. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. The October 2025 monthly security update will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the August 21 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

Microsoft has introduced a hardening change to strengthen the Microsoft RPC Netlogon protocol by blocking RPC anonymous requests used to locate domain controllers. This change was Enabled by Default in the May 2025 Windows security update for Windows Server 2025, and in the July 2025 Windows security update for all supported versions from Windows Server 2008 SP2 through Windows Server 2022. This change is configurable by policy after installing the August 2025 Windows security update. See the article, KB5066014—Netlogon RPC Hardening (CVE-2025-49716), for details. 

 

After applying these updates and subsequent updates, Active Directory domain controllers will reject certain anonymous RPC requests. This may affect interoperability with services like Samba unless they are updated to meet the new access requirements.

 

To prepare for this update, review your environment for any dependencies on anonymous Netlogon RPC requests. If your organization uses Samba, refer to the Samba release notes for guidance on compatibility. It is also recommended to test the update in a staging environment to identify and address any potential disruptions before full deployment.

 

For more information, see the May or July KB update article that matches your server version’s security update.

On November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing. The November 2025 monthly security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro)

lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

The August 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

IT pros: Windows PowerShell 2.0 is removed from Windows 11, version 24H2 starting with the August 2025 non-security update. It’s also removed from Windows Server 2025 starting with the September 2025 security update. Windows Insider preview builds already reflect this change as of July 2025. Windows PowerShell 2.0 is over 14 years old, lacks many security enhancements of the later versions, and has been deprecated since 2017. By using the newer and supported PowerShell 7 or PowerShell 5.1, you can help ensure that scripts run safer. If you have legacy scripts or software that explicitly depend on PowerShell 2.0, you’ll need to either update them or use a workaround to prevent disruptions. Read PowerShell 2.0 removal in Windows for further details.

Emerging technologies including AI and agents are reshaping the cybersecurity landscape and how organizations operate. Read about five key trends in security, new risks, and the steps organizations can take to stay agile, protected, and prepared. Read more at Security leadership in the age of constant disruption.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover enhancements to Microsoft Store apps, hotpatching, Windows Autopilot, update and driver management, AI, and more. Learn how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security.

If you manage Windows devices for your organization, see how you can migrate to Windows 11 with cloud-native management. Follow 5 steps to turn your Windows 10 domain-joined and co-managed devices to Microsoft Entra joined with Microsoft Intune. The same steps apply if you’re transitioning away from hybrid joined Windows 11 devices. Find the details at Windows 11 cloud-native migration with Microsoft Intune.

If your role includes updating Windows across your organization, this Windows Autopatch upgrade playbook is for you. Use Windows Autopatch groups to gradually roll out Windows 11 before Windows 10 reaches end of servicing on October 14, 2025. Assess Windows 11 readiness before segmenting devices into Windows Autopatch groups. Configure how fast the feature update rolls out with the multi-phase release schedule. Finally, monitor your rollout with feature update reporting. Read all the details for more and less common scenarios in Upgrade to Windows 11 with Windows Autopatch groups.

On October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. The October 2025 monthly security update will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Microsoft has introduced a hardening change to strengthen the Microsoft RPC Netlogon protocol by blocking RPC anonymous requests used to locate domain controllers. This change was Enabled by Default in the May 2025 Windows security update for Windows Server 2025, and in the July 2025 Windows security update for all supported versions from Windows Server 2008 SP2 through Windows Server 2022. This change is configurable by policy after installing the August 2025 Windows security update. See the article, KB5066014—Netlogon RPC Hardening (CVE-2025-49716), for details. 

 

After applying these updates and subsequent updates, Active Directory domain controllers will reject certain anonymous RPC requests. This may affect interoperability with services like Samba unless they are updated to meet the new access requirements.

 

To prepare for this update, review your environment for any dependencies on anonymous Netlogon RPC requests. If your organization uses Samba, refer to the Samba release notes for guidance on compatibility. It is also recommended to test the update in a staging environment to identify and address any potential disruptions before full deployment.

 

For more information, see the May or July KB update article that matches your server version’s security update.