Windows 10 22H2 Enablement

Question

Hello I support a customer who has two labs without external connectivity. I know normally that to get to 22h2 in Domain/work environment or at home that you receive the 22H2 Enablement via WSUS, SCCM, or Windows Update.

To my knowledge and according to KB5040427 this msu/Enablement is not being made available on the Microsoft Update Catalog website. There is an msu there for that KB but it does not bring the build to 22H2.

This would mean without this update that the only path forward would be via a 22H2 ISO with an in place upgrade which leaves me with questions. In place upgrades are almost like laying down the whole OS again and I am wondering what that would do to any hardening done on these machines.

The reason for going to 22h2 is for compliance reasons as 21H2 is now considered end of life.

Normally I am able to airgap updates using Microsoft's wsusscn2.cab file however because MS treats 22H2 differently that does not come down with normal updates.

July 9th 2024 KB5040427

https://support.microsoft.com/en-us/topic/july-9-2024-kb5040427-os-builds-19044-4651-and-19045-4651-78458e76-9404-41b4-91b2-6d3cdcf4a530