Windows message center

  • Article

    Recent announcements

    MessageDate
    Coming soon to Intune: Windows driver and firmware updates
    Soon, you’ll be able to manage Windows driver and firmware updates in Microsoft Intune. A new blog article describes the advantages and new capabilities that will become generally available in June 2023. Driver update management policies and reports are built on the Windows Update for Business deployment service public preview and are part of the Windows Enterprise offerings. With it, you can take advantage of intelligent servicing, trusted quality, more granular controls, optional drivers and firmware, detailed reporting, and an integration with Windows Autopatch. Read Coming soon to Intune: Windows driver and firmware updates for more details.
    		2023-05-25
    10:00 PT
    The May 2023 Windows non-security preview update is now available for Windows 11, version 22H2
    The May 2023 non-security preview update is now available for Windows 11, version 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    If you have Home or Pro consumer devices or non-managed business devices that run Windows 11, version 22H2, you can get some of the new enhancements announced yesterday. Open Windows Update settings (Settings > Windows Update). Select Get the latest updates as soon as they are available. Set the toggle to On and select Check for updates. Note that the toggle won't be enabled for managed devices. These are managed by Windows Update for Business or Windows Server Update Services (WSUS).

    Highlights for the Windows 11, version 22H2 update:
    • This update provides the full amount of storage capacity of all your OneDrive subscriptions. It also displays the total storage on the Accounts page in the Settings app.
    • This update adds Bluetooth LE Audio. This improves audio fidelity and battery life when you pair your device with Bluetooth audio devices. 
    • This update addresses an issue that affects Narrator. It now announces text attributes correctly for words, such as "misspelled," "deletion change," and "comment."
    • This update addresses an issue that affects access to Tab settings for IE mode sites.
    • This update addresses an issue that affects audio playback. It fails on devices that have certain processors.
    		2023-05-24
    10:00 PT
    The May 2023 Windows non-security preview update is now available for some versions of Windows
    The May 2023 non-security preview update is now available. These optional non-security previews are released for Windows 10, version 22H2 and Windows 11, versions 21H2 only. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    Highlights for the Windows 11, version 21H2 update:
    • This update addresses an issue that affects Narrator. It now announces text attributes correctly for words, such as "misspelled," "deletion change," and "comment."
    • This update fixes an issue that affects access to Tab settings for IE mode sites.
    • This update addresses an issue that affects certain printers. They fail to install if they connect to Wi-Fi automatically.
    • This update resolves an issue that affects audio playback. It fails on devices that have certain processors.
    • This update improves the user experience (UX) and interactions for the search box on the taskbar.
    		2023-05-23
    10:00 PT
    New Windows 11 innovations for privacy, security, and productivity
    Starting tomorrow, May 24th, new enhancements are coming to Windows 11 to improve professional and personal usability. We’re bringing privacy, security, and accessibility to your fingertips. Explore features a for secure, efficient IT management and intuitive user experience, such as new app privacy settings that allow you to enable presence-sensing for hands-free secure sign-in and disable it when you walk away. You’ll also see that Widgets now feature a larger layout with dedicated space for user-pinned apps and the ability to personalize your feeds to highlight the news you care about most.

    For developers building on Windows, we encourage you to read about even more new innovations announced at Microsoft Build. And, if you’re an IT administrator, there’s more to explore. Find out how we’re Expanding IT value in Windows 11 Enterprise and Intune.
    		2023-05-23
    08:00 PT
    Attend Build 2023 to learn about Windows tools for developers
    If you’re a developer, get up to speed on current topics and tools at our annual Build event next week. The online portion will take place on May 23 and 24, 2023. You can explore the session catalog and read about the experts before building your unique learning agenda with the session scheduler. Select from a variety of Windows-related sessions focused on Windows Hybrid Apps, Microsoft Dev Box, Apps for ARM, among others, including multiple technologies from partners and startups. Register today and access the 30+ Windows sessions: Build session catalog for Windows.
    		2023-05-19
    10:00 PT
    New details on IE11 desktop application next steps
    Based on customer feedback, Internet Explorer 11 (IE11) visual references, such as the IE11 icons on the Start Menu and taskbar, will no longer be removed by Windows update as previously communicated. Organizations will continue to maintain control over determining the timing to remove IE11 visual references from their devices, if they have not already done so, by using the Disable IE policy.

    Additionally, changes will be made over the next coming months to redirect a small subset of exceptional scenarios where IE11 is still accessible to Edge. This ensures users access a supported and more secure Microsoft browser. Details will be available in the Windows and Microsoft Edge release notes.

    As a reminder, IE11 has been out of support since June 15, 2022, and was permanently disabled on February 14, 2023. These changes are intended to provide a better user experience and smoothly transition users from IE11 to Microsoft Edge to ensure a faster, more secure, and more modern web experience. Read the FAQ to help answer your questions: Internet Explorer 11 desktop app retirement FAQ.
    		2023-05-18
    08:30 PT
    Join Windows office hours on May 18, 2023, at 9:00 a.m. PT
    If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams stand by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams.

    Want to attend the May 18th session of Office Hours? Click here to add it to your calendar and log in to the Tech Community to post your questions early! You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.
    		2023-05-17
    10:00 PT
    Changes to Windows Server security hardening for Netlogon and Kerberos coming July 11, 2023
    Recent Windows updates released address vulnerabilities in the Netlogon protocol when remote procedure call (RPC) signing is used instead of RPC sealing. The Netlogon RPC interface is primarily used to maintain the relationship between a device and its domain, and relationships among domain controllers (DCs) and domains. All domain-joined, machine accounts are affected by these vulnerabilities. Guidance and documentation can be found at KB5021130: How to manage Netlogon protocol changes related to CVE-2022-38023.
     
    Please note, updates released April 11, 2023 and later have brought two important changes which can affect the testing and deployment processes which were previously documented for this hardening:
    • Guidance around a group policy object (GPO) setting that could be used as way to exclude individual accounts from the hardening has been removed. After investigation, we concluded this setting was not an effective workaround for certain scenarios involving these hardening changes, and the related guidance was cleared from the KB documentation. 
    • Certain scenarios were not being affected by the hardening changes included in a November 8th, 2022 update. These scenarios were fixed in the April 11, 2023 updates, which may cause Netlogon EventIDs 5838 and/or 5839 to start being logged after installing the April 11th, 2023 update.
    To help secure your environment, install Windows updates dated April 11, 2023 or later on all devices, including DCs. As always, we recommend that devices are kept up to date with the latest versions of Windows.
     
    Windows updates released on and after July 11, 2023 will fully enforce RPC sealing requirements - we strongly recommend that IT administrators conduct testing by enabling hardening changes before this date. For full details on these security hardenings and how to detect issues in your environment, see KB5021130: How to manage Netlogon protocol changes related to CVE-2022-38023.
    		2023-05-15
    14:00 PT
    Reminder: End of servicing for Windows 10, version 21H2 Home, Pro, Pro Education, and Pro for Workstations
    On June 13, 2023, Home, Pro, Pro Education, and Pro for Workstations editions of Windows 10, version 21H2 will reach end of servicing. The upcoming June 2023 security update, to be released on June 13, 2023, will be the last update available for these versions. After this date, devices running these version will no longer receive monthly security and preview updates containing protections from the latest security threats.

    To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of, reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update.

    As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the Windows 10, version 21H2 end of servicing (Home & Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.
    		2023-05-12
    10:00 PT
    30-Day Reminder: New hardening phase for addressing CVE-2022-37967 starts in June
    Security hardening changes needed on domain controllers in IT environments to address CVE-2022-37967 will enter the Third deployment phase, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 on June 13, 2023.

    Currently, it is still possible to bypass security hardening requirements using the guidance provided in KB5020805. However, beginning with the June 13, 2023 updates, the ability to bypass hardening measures will be reduced. To help protect your environment and prevent outages, we recommend that you update your Windows domain controllers with a Windows update released on or after November 8, 2022, move your Windows domain controllers to Audit mode by using the Registry Key setting, and enable enforcement mode as soon as possible.

    Additional deployment phases in July 2023 and October 2023 will raise the default minimum for the security hardening changes for CVE-2022-37967, and environments must be compliant before installing updates for each phase onto your domain controller. It is recommended to move to enforcement mode as soon as possible. For complete guidance, see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967.
    		2023-05-12
    10:00 PT
    Join the webinar on Windows release information experiences
    Attend the upcoming webinar for IT admins on May 24, 2023! Windows release health is an information hub that empowers you to better manage Windows updates. It’s available publicly and through the Microsoft 365 admin center (authenticated portal). You can use it to find details about Windows known issues, safeguard holds, hardening changes, monthly updates, lifecycle updates, and new versions of Windows. In this Teams live event, you’ll learn to use these capabilities and the improvements we’ve made to your experience. Follow links to submit your questions and feedback in advance at What's new in Windows release information experiences, and complete the event registration form to join us on May 24, 2023.
    		2023-05-10
    13:00 PT
    Take action: May 2023 security update is now available
    The May 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.
      
    Highlights for the Windows 11 update: 
    • This update adds a new toggle control on the Settings > Windows Update page. When you turn it on, we will prioritize your device to get the latest non-security updates and enhancements when they are available for your device. For managed devices, the toggle is disabled by default. For more information, see Get Windows updates as soon as they're available for your device.
    • This security update includes improvements that were a part of update KB5025305 (released April 25, 2023).
    Short on time? Watch our short Windows 11 update release notes video for this month's tips.
    		2023-05-09
    10:00 PT
    Take action: Additional guidance and manual steps required for devices using Secure Boot to address CVE-2023-24932
    Security updates released May 9, 2023 and later contain security hardening changes to protect against vulnerabilities tracked by CVE-2023-24932 that can bypass the Secure Boot security feature using the BlackLotus UEFI bootkit. These hardening changes are available but not enabled by default in these updates. The security hardening for CVE-2023-24932 will be done in phases, as steps must be taken to prevent issues on your device when the revocations are applied/enabled, which is required to address CVE-2023-24932. 
      
    For information on how to apply the revocations and what is required before you apply the revocations, see KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. We recommend that all Windows users review this documentation carefully, including both IT administrators and consumers. 
    		2023-05-09
    10:00 PT
    Windows 10, version 20H2 has reached end of servicing - May 9, 2023
    Starting today, May 9, 2023, all editions of Windows 10, version 20H2 have reached end of servicing. The May 2023 security update, released on May 9, is the last update available for this version. Devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.
     
    To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update.
     
    As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the Windows 10, version 20H2 end of servicing (Enterprise, Education) lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.
    		2023-05-09
    10:00 PT
    Latest Windows hardening guidance and key dates
    If you’re an IT admin, you can consult the latest timeline of hardening changes as part of your security strategy. Last month, two areas entered their second hardening phase: Netlogon protocol, and certificate-based authentication. The article lists these and the following hardening changes through January 2024. Other vulnerable areas undergoing hardening in the upcoming months are Kerberos PAC signatures and Active Directory (AD) permissions. Read Latest Windows hardening guidance and key dates to find out details, KB numbers, and additional resources to help you prepare your organization for these changes. 
    		2023-05-08
    10:00 PT
    Iran 2023 time zone update now available
    Microsoft is aware of Daylight Savings Time related changes in Iran. After returning to the standard time on September 22, 2022, the Iran Government elected to remain permanently in the standard time, cancelling daylight saving time. Hence, Iran will permanently remain at UTC + 3:30 time zone going forward. 

    The required Daylight Savings Time changes are available in the April 2023 optional non-security preview updates, which were released on April 25, 2023 for some versions of Windows. All other supported versions of Windows will receive the needed Daylight Savings Time changes in updates released on May 9, 2023.

    If you are still having issues with your device not showing the correct time or date after installing appropriate updates, please verify you are on the latest update available for a supported version of Windows. This can be done by Checking for updates. If you are on the latest update for a supported version of Windows and are still experiencing issues related to Daylight Savings Time changes, please use Feedback Hub to file a report. See Send feedback to Microsoft with the Feedback Hub app for instructions.

    For more information about this Daylight Savings Time change, please see Iran 2023 time zone update now available.
    		2023-05-05
    08:00 PT
    Windows LAPS with Azure AD and Microsoft Intune support is now in public preview
    See what’s new with the Windows Local Administrator Password Solution (LAPS) and how it can help keep your business secure. As of the April 11, 2023 security update, LAPS is now natively integrated into Windows. We’re now extending the solution to the cloud with Windows LAPS management in Microsoft Intune and - now in public preview - support for Azure Active Directory (Azure AD). Some of the new features include rich policy management, automatic rotation, dedicated event logs, a new PowerShell module, hybrid join support, and more.

    For more details and guidance for cloud and on-premises environments, read the following announcements: 

    		2023-05-04
    10:00 PT
    New feature: Sign up for Windows known issue email alerts
    A new email alert feature can notify you about Windows known issues documented in the Windows release health section within the Microsoft 365 admin center. It’s available to you if you’re a Windows or Microsoft 365 tenant with access to the Microsoft 365 Windows release health page and an eligible admin role. You can sign up to receive information about new issues disclosures, changes in issue status, new workarounds, and issue resolution information right in your inbox. Find guidance and an inside look in the embedded video in New feature: Sign up for Windows known issue email alerts.
    		2023-05-03
    10:00 PT
    April skilling snacks: Bite-sized learning for IT pros
    Our special learning series continues to build a wider topics library for IT pros for continued professional development. These weekly selections of already existing, public resources are packaged in a way that is easy to consume in under two hours. It’s meant for all skill levels: those who are new to IT and seasoned vets looking for refresher or mentoring materials. Take advantage of the following topics published in the month of April: 
    Bookmark the series library post to catch up on the topics that are of most interest to you and at a time that’s most convenient for you: Windows skilling snacks: bite-sized learning for IT pros.
    		2023-04-28
    15:00 PT
    Egypt 2023 time zone update available in the April 2023 monthly quality update
    Microsoft is aware that Daylight Savings Time related changes in the Arab Republic of Egypt will resume on the last Friday of April. The April 2023 monthly quality update for all supported version of Windows includes the following time zone update for Egypt: 

    • Clocks will be set forward by an hour at 12:00 a.m. on April 28, 2023, for the Egypt time zone.
    The April 2023 monthly quality update was released on April 11, 2023 and can be installed today. Updates will need to be installed in advance of Daylight Savings Time related changes in the Arab Republic of Egypt, which begin April 28.

    If you are still having issues with your device not showing the correct time or date after installing the April 2023 updates for Windows, please verify you are on the latest update available for a supported version of Windows by Checking for updates. If you are on the latest update for a supported version of Windows and are still experiencing issues related to Daylight Savings Time changes, please use Feedback Hub to file a report. See Send feedback to Microsoft with the Feedback Hub app for instructions.

    For more information about this Daylight Savings Time change, please see Egypt 2023 time zone update now available.
    		2023-04-27
    14:30 PT
    Windows client roadmap update
    See two lifecycle updates published on the Windows IT Pro Blog with respect to Windows 10 and Windows 11. Windows 10, version 22H2 will be the final version of Windows 10 released. It will receive monthly security update releases until October 14, 2025. That is the official end of support date for Windows 10. The Long-Term Servicing Channel (LTSC) will be available for Windows 11 Enterprise and Windows 11 IoT Enterprise in the second half of 2024. We recommend you begin transitioning to Windows 11 if you haven’t already. Read Windows client roadmap update for additional details and resources. 
     
    		2023-04-27
    10:00 PT
    Removal of Microsoft Store for Business tab from Microsoft Store app on Windows 10 and Windows 11 PCs
    Beginning mid-May, we will begin gradually rolling out the removal of the Microsoft Store for Business tab from the Microsoft Store app on Windows 10 and Windows 11 PCs. You will no longer be able to see line-of-business products listed in the Microsoft Store for Business tab in Microsoft Store when this change is implemented. The Microsoft Store for Business tab will continue to be available on HoloLens devices.

    Note: The retirement of Microsoft Store for Business and Education on Windows 11 was announced in 2021

    It is recommended to add your apps through the new Microsoft Store app experience in Intune. If an app is not available in the Microsoft Store, you will need to retrieve an app package from the vendor and install it as a line-of-business (LOB) app or Win32 app. For instructions read the following articles:

    Stay tuned to the Intune Customer Success blog as we will be publishing more information about this soon.
    		2023-04-26
    10:00 PT
    The April 2023 Windows non-security preview update is now available
    The April 2023 non-security preview update is now available. These optional non-security previews are released for Windows 10, version 22H2 and Windows 11, versions 21H2 and 22H2 only. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    NOTE Starting in April 2023, optional, non-security preview updates will be released on the fourth week of the month.

    Highlights for the Windows 11, version 22H2 update:
     
    • This update adds animations to a few icons on the Widgets taskbar button. These animations turn on when a new announcement appears on the Widgets taskbar button and when you hover over or click the Widgets taskbar button.
    • This update adds a new toggle control on the Settings > Windows Update page. When you turn it on, your device will opt in to receive future non-security updates as soon as they are available. For commercial customers, the toggle is disabled by default. 
    • This update addresses an issue that affects Microsoft Edge IE mode. Pop-up windows open in the background instead of in the foreground.
    • This update addresses an issue that affects the Chinese input method. You cannot see the entirety of the first suggested item.
    		2023-04-25
    10:00 PT
    Get Windows updates as soon as they're available for your device
    For devices running Windows 11, version 22H2 or later, you can now choose to get the latest non-security updates, fixes, improvements, and enhancements via several servicing technologies—including controlled feature rollout (CFR), as soon as they become available for your device.

    To enable this feature, select Start > Settings > Windows Update and toggle the Get the latest updates as soon as they're available option to On. This allows your device to automatically download and install the latest non-security and feature updates as soon as they become available for your device (now and in the future).  The toggle does not affect recommended security updates, which will still be installed as usual. After installation, you can view update details by going to Start > Settings > Windows Update > Update history. For managed devices, the toggle is disabled by default.

    		2023-04-25
    10:00 PT
    Changes to the deployment phase for CVE-2022-37967 - now beginning June 13, 2023
    Security hardening changes needed on domain controllers in IT environments to address CVE-2022-37967 will enter the Third deployment phase, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 on June 13, 2023. Previous announcements had listed this change as taking place in April, however, that date has changed.

    At this time, it's still possible to bypass security hardening requirements using the guidance provided in KB5020805. However, beginning with the June 13, 2023 updates, the ability to bypass hardening measures will be reduced. To help protect your environment and prevent outages, we recommend that you update your Windows domain controllers with a Windows update released on or after November 8, 2022, move your Windows domain controllers to Audit mode by using the Registry Key setting, and enable enforcement mode as soon as possible.

    Additional deployment phases in July 2023 and October 2023 will raise the default minimum for the security hardening changes for CVE-2022-37967, and environments must be compliant before installing updates for each phase onto your domain controller. It is recommended to move to enforcement mode as soon as possible. For complete guidance, see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967.
    		2023-04-13
    10:00 PT
    By popular demand: Windows LAPS available now
    See what’s new with Local Administrator Password Solution (LAPS) and how it can help keep your business secure. LAPS is used to manage the password of a specified local administrator account by regularly rotating the password and backing it up to Active Directory (AD). Starting with the April 11, 2023 security update, LAPS is natively integrated into Windows with new capabilities for on-premises AD scenarios and forthcoming Azure Active Directory benefits (currently in private preview). Some of the new features include rich policy management, automatic rotation, dedicated event log, new PowerShell module, hybrid-joined support, and more. For more details and guidance for cloud and on-premises environments, read By popular demand: Windows LAPS available now!
    		2023-04-12
    10:00 PT
    Windows Update for Business reports: access and region control 
    Preview the more flexible data routing and access controls, as well as new regions for data storage with Windows Update for Business reports. A new blog article reviews what data routing and access control are, what’s required for them with your regular Azure tools, and how the new solution automates and simplifies your update compliance monitoring. Specifically, this solution is helpful to report on or control access to a subset of tenant devices. 
     
    Find guidance and follow 7 easy steps to route the tenant’s primary workspace into separate secured workspaces for each access control scope: 
    1. Define scopes. 
    2. Create Azure Active Directory groups. 
    3. Group resources and restrict tag access. 
    4. Download the Ansible solution. 
    5. Configure your deployment. 
    6. Deploy the Ansible solution to Azure. 
    7. Use the Ansible solution. 
    		2023-04-12
    10:00 PT
    Improvements for Windows Server 2022: Enabling the playback feature
    Beginning April 11, 2023, the playback feature will be available for Windows Server 2022 in a phased manner. This feature will help reduce network bandwidth usage by making update sizes smaller through more efficient packaging and removal of reverse differentials from the cumulative update package. The articles below will help you understand the concepts of forward and reverse differentials in the Windows cumulative update. They will also explain how we leveraged differentials to reduce the update sizes for Windows 11.

    By default, the feature will be shipped as disabled during phase 1. See KB5026322—Improvements for Windows Server 2022: Enabling the playback feature for steps on enabling this feature.
    		2023-04-12
    10:00 PT
    Take action: April 2023 security update available for all supported versions of Windows
    The April 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.
     
    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    NOTE Starting in April 2023, optional, non-security preview updates will release on the fourth Tuesday of the month.
     
    Highlights for the Windows 11 update: 
    • This security update includes improvements that were a part of update KB5023778 (released March 28, 2023).
    • This update implements the new Windows Local Administrator Password Solution (LAPS) as a Windows inbox feature. For more information, see By popular demand: Windows LAPS available now!
    Short on time? Watch our short Windows 11 update release notes video for this month's tips.
    		2023-04-11
    10:00 PT
    Reminder: End of servicing for Windows 10 version 21H2 (Editions: Home, Pro, Pro Education and Pro for Workstations)
    On June 13, 2023, Home, Pro, Pro Education and Pro for Workstations editions of Windows 10, version 21H2 will reach end of servicing. The upcoming June 2023 security update, to be released on June 13, 2023, will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

    To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update.

    As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the entry for Windows 10, version 21H2 end of servicing (Home & Pro) at the learn.microsoft.com lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.
    		2023-04-06
    10:00 PT
    Take action: Review Windows Autopatch Tenant Management for potential action required to prevent inactive status
    Beginning May 2023, Windows Autopatch is improving the existing Tenant management experience within our portal. The Tenant management blade is used to alert IT admins of any actions that are required to maintain overall service health. We are introducing the ability to alert you on:
    1. Expired licenses that must be renewed or replaced to maintain access to Windows Autopatch.
    2. Access related issues that would prohibit Windows Autopatch from managing your tenant.

    We are also introducing the ability to mark the Windows Autopatch section of your tenant as “inactive” if there are any actions that need to be taken. To know if action is required, visit the Tenant management section and select the banner displayed within the Windows Autopatch Devices blade that alerts you to take action.

    If you have no actions that need to be taken, there is no effect on your tenant. However, if the service has identified actions for you to take, you must act to avoid interruption with the Windows Autopatch service. Learn more about Windows Autopatch tenant actions. If you'd like to discover Windows Autopatch, see our overview at What is Windows Autopatch.
    		2023-04-03
    15:00 PT
    New Features in Windows Autopatch Public Preview
    To provide IT admins the ability to customize Windows feature and quality updates in line with existing organizational structures and business goals, Windows Autopatch is releasing a new feature set to meet customers where they are at in their update management journey. The new release has now entered public preview. Beginning May 1, Windows Autopatch gives you the choice to leverage new capabilities including:

    • Windows Autopatch Groups: set up your own distinct sets of deployment rings, and deployment cadence.
    • Windows feature updates release management: leverage Windows Autopatch Groups and its deployment rings when creating new Windows feature update deployments
    • Reporting: Refresh of our existing reporting, providing insight into update compliance, deployment status and update failures.
    • Policy health and remediation: Initiate actions for the Autopatch service to restore policies and restore deployment rings.
    If you’re ready to start testing it out, you can choose to opt-in by enabling Windows Autopatch Groups and the bundled feature set in your tenant. Start at the Microsoft Intune admin center and navigate to the Autopatch Groups (preview) tab from the Release Management options. If you're not using Windows Intune, learn more today at Learn about using Windows Update for Business in Microsoft Intune.
    		2023-04-03
    15:00 PT
    March skilling snacks: Bite-sized learning for IT pros
    Our special learning series continues to build a wider topics library for the continued professional development of IT pros. These weekly selections of public resources are packaged in a way that is easy to consume in under two hours. Topics are meant for all skill levels: those who are new to IT, and seasoned vets looking for refresher or mentoring materials. This month, review Windows Autopilot, cloud virtualization spaces, application compatibility, and Windows monthly updates.
     
    Take advantage of the following topics published in the month of March:
    		2023-03-30
    15:00 PT
    March 2023 Windows non-security preview update available for all supported versions of Windows
    The March 2023 non-security preview update is now available for all supported versions of Windows. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    NOTE Starting in April 2023, optional, non-security preview updates will release on the fourth Tuesday of the month.

    Highlights for the Windows 11, version 22H2 update:
     
    • This update introduces notifications for Microsoft accounts in the Start menu. This is only available to a small audience right now. It will deploy more broadly in the coming months. Some devices might notice different visual treatments as we gather feedback. 
    • The search box on the taskbar will be lighter when you set Windows to a custom color mode. This will occur when you set the Windows mode to dark and the app mode to light in Settings > Personalization > Colors.
    • This update addresses an issue that affects the Notepad combo box in Settings. It fails to show all the available options.
    • This addresses an issue that affects Microsoft PowerPoint. It stops responding. This occurs when you use accessibility tools.
    • This addresses an issue that affects USB printers. The system classifies them as multimedia devices even though they are not.
    		2023-03-28
    10:00 PT
    Reminder: The Third deployment phase for CVE-2022-37967 starts with updates released April 11, 2023
    Security hardening changes needed on Domain Controllers in IT environments to address CVE-2022-37967 will enter the Third deployment phase with the release of updates on April 11, 2023, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967. Each phase raises the default minimum for the security hardening changes for CVE-2022-37967 and your environment must be compliant before installing updates for each phase onto your Domain Controller.

    If you are using the workaround to disable PAC signature addition by setting the KrbtgtFullPacSignature subkey to a value of 0, you will no longer be able to use this workaround after installing updates released April 11, 2023. Your apps and environment will need to at least be compliant with KrbtgtFullPacSignature subkey to a value of 1 to install these updates on your Domain Controllers.

    If you are not using any workaround for issues related to CVE-2022-37967 security hardening, you might still need to address issues in your environment for the coming phases; July 11, 2023 - Initial enforcement phase and October 10, 2023 - Full enforcement phases.

    Important: It is recommended to move to enforcement mode as soon as possible, to enable all parts of the security hardening in your environment. For more information, please see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967
    		2023-03-27
    11:00 PT
    Windows app confidence advice for inventory, testing, and deployment health needs
    A new Windows IT Pro Blog series offers the best application compatibility advice. This introductory article provides a behind-the-scenes look at how Microsoft maintains 99.7% compatibility rates with additional support available for the remaining 0.3%. It also outlines the following three posts that guide IT pros through app inventory, testing, and deployment health.

    1. Inventory: Read our inventory guidance today to learn about ways to get insights into your app inventory! Specifically, get guidance on using Intune’s built-in discovered apps and Upgrade Readiness reports. With these tools, you can confidently start deploying Windows 11 apps today.
    2. Testing: Visit App confidence: Optimize app validation with Test Base for help to improve app testing with Test Base for Microsoft 365.
    3. Deployment health: Visit App confidence: Monitor app health and fall back on App Assure to learn about deploying and monitoring app health with Endpoint analytics and App Assure.
    		2023-03-27
    11:00 PT
    What’s UUP? New update style coming next week!
    Unified Update Platform (UUP) servicing comes to on-premises update management for Windows 11, version 22H2 devices on March 28, 2023. The March 2023 security update, released March 14, 2023, is all that’s needed for IT pros to be ready for the new style of updates coming to WSUS and Configuration Manager. The update will also offer a one-time 10GB download to distribution points.
     
    Review What’s UUP? New update style coming next week for additional information and multiple benefits UUP servicing is bringing to subsequent downloads to distribution points and endpoint clients. Consult a complementary FAQ: WSUS and Unified Update Platform (UUP) on premises for questions on firewall and MIME type configurations, automatic approval rules, management of superseded updates, Microsoft Connected Cache, Dynamic Update changes, and others.
    		2023-03-23
    11:00 PT
    March 2023 Windows non-security preview release is available for some versions of Windows
    The March 2023 non-security preview release is now available for Windows 10 version 22H2, version 21H2, and version 20H2. The preview update for Windows 11 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only monthly security update releases will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    NOTE Starting in April 2023, optional, non-security preview updates will release on the fourth Tuesday of the month.

    Highlights for the Windows 10, version 22H2 update:
     
    • This update addresses an issue that affects USB printers. The system classifies them as multimedia devices even though they are not.
    		2023-03-21
    14:00 PT
    Windows monthly updates explained
    Starting in April 2023, non-security releases - formerly called “C” or “D” releases - will now target the fourth week of the month to ensure that our monthly patches are more effective than ever. Our new Windows IT Pro Blog post provides an updated reference for all monthly updates, explaining the differences between security and non-security updates, as well as defining out-of-band (OOB) releases and new features delivered as continuous innovation. Learn about how we’ve optimized different releases and find additional resources to support your update management success in Windows monthly updates explained.
    		2023-03-21
    10:00 PT
    Take Action: Additional guidance with a script for updating WinRE in CVE-2022-41099
    The Windows Recovery Environment (WinRE) is a companion operating system installed by default alongside Windows 10 and Windows 11, typically in a separate partition, which can help with system troubleshooting or recovery. To address recent security vulnerabilities in CVE-2022-41099, WinRE needs to be updated through a manual process.

    Updating WinRE partitions requires special steps. Carefully review the guidance in CVE-2022-41099 and take action to update your devices. We have added additional guidance including a script to automate updating the WinRE image. Please see the Frequently Asked Questions section in CVE-2022-41099 for more information. 

    We recommend both Home users and IT admins managing IT environments complete this update process, in order to remain protected. If you need additional help, please see Global Customer Service phone numbers or Support for business for more information on how to contact support.
    		2023-03-17
    15:30 PT
    Mexico 2023 time zone updates now available
    As a result of the October 26th, 2022, order from the Mexican Government, Daylight Saving Time (DST) in the United Mexican States will not be observed in 2023 calendar year. Only US-Mexico border parts of Chihuahua, Coahuila, Nuevo León, Tamaulipas, and the state of Baja California will continue the established DST schedule. This schedule started on Sunday, March 12, 2023 at 2:00 AM and will end on Sunday, November 5, 2023 at 2:00 AM.

    Microsoft has released Windows Updates in support of these changes as part of the February 2023 Cumulative Update preview for Windows 10, versions 20H2, 21H2, and 22H2, as well as for Windows 11, version 21H2 and 22H2. All other supported Windows versions will receive the update as part of March 2023 monthly quality update available beginning March 14th. Please read Mexico 2023 time zone updates now available for additional details and resources.
    		2023-03-17
    11:00 PT
    Take action: March 2023 security update available for all supported versions of Windows
    The March 2023 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. 
     
    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.
     
    Highlights for the Windows 11 update: 
    • This security update includes improvements that were a part of update KB5022913 (released February 28, 2023).
    • This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
    Short on time? Watch our short Windows 11 update release notes video for this month's tips.
    		2023-03-14
    10:00 PT
    Reminder: Windows Distributed Component Object Model (DCOM) hardening changes for March 14, 2023.
    As previously announced, security requirements have increased for Windows devices that use the Distributed Component Object Model (DCOM) or Remote Procedure Call (RPC) server technologies. DCOM clients attempting to establish connections to DCOM servers which have applied updates released June 14, 2022, or later, must support an authentication level of RPC_C_AUTHN_LEVEL_PKT_INTEGRITY and higher.

    As of March 14, 2023, it is no longer possible to bypass authentication level enforcement by creating a registry key in the DCOM server. Updates released on March 14, 2023 and later updates will have hardening changes enabled by default with no ability to disable them. By this point, you must resolve any compatibility issues with the hardening changes.

    		2023-03-14
    10:00 PT
    Take Action: Discontinue use of Microsoft Update Compliance. Enroll in Windows Update for Business reports.
    After March 31st, 2023 Update Compliance reports will no longer be available. Organizations are advised to enroll in Windows Update for Business reports as soon as possible to continue to receive reports.

    Windows Update for Business reports is a new experience, providing reporting for Quality updates, Feature updates, and Delivery optimization. These features offer organization and device-level reporting for security and feature update monitoring, as well as bandwidth savings for devices using Microsoft Connected Cache.

    Organizations who are still using Update Compliance reporting are already at risk of disruption in their reporting processes before end of the month. Complete migration to Windows Update for Business reports now. See our list of resources:

    		2023-03-13
    10:00 PT
    Delivery Optimization report now generally available on Windows Update for Business Reports.
    A new type of report is available to monitor Delivery Optimization performance across the entire organization. This report is part of Windows Update for Business reports, formerly Microsoft Update Compliance. Quick and easy insights are based on data from the last 28 days, including peer-to-peer and Microsoft Connected Cache technologies. Follow step-by-step guidance published in Delivery Optimization report now generally available on how to get started and how to customize your report. Specifically, learn about device configuration, content distribution, efficiency by device group, as well as about three relevant schema tables for your reporting needs.
    		2023-03-09
    14:00 PT
    February 2023 Windows non-security preview release available for all supported versions for Windows
    The February 2023 non-security preview release is now available for all supported versions of Windows. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 and Windows 10 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT After March 2023, there will be no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    Highlights for the Windows 11, version 22H2 update:
     
    Today, Panos Panay announced new features and apps for Windows 11, version 2022. Some are available via this February preview release and also will be included in the March 2023 security update. Some of these new experiences in these releases include:

    • This update improves the search box experience on the taskbar by displaying search results in a flyout box as you type in the search box.
    • You can now access Windows Studio effects directly from quick settings on the taskbar for devices that have a supported neural processing unit (NPU). This allows easy configuration of camera effects such as Background blur, Eye contact, Automatic framing, and Audio effects.
    • This update makes it easier to get help if you are having PC issues. You can now find Quick Assist in the Start menu’s All apps list.
    • Windows now provides energy recommendations to enhance the energy efficiency of your PC and reduce your carbon footprint.
    Read about the full list of features included in this release at Panos Panay’s post on the Windows Experience Blog. If you are an IT admin and want to explore new experiences for your organization and find details on how to configure the rollout for select features, visit the Windows IT Pro Blog.
    		2023-02-28
    10:00 PT
    New experiences and apps available for Windows 11, version 22H2
    Today, we deliver on our promise to bring exciting new experiences to Windows 11 more frequently and innovate in ways that matter to you. We are bringing new features that make staying connected – whether it be to the people or information you care about – easier, for everyone.

    The new features will be part of the March 2023 quality update and delivered via Windows Update. Included in this update will be experiences such as enhanced accessibility features for braille and voice commands, improvements to the search experience on the taskbar, and energy use recommendations.

    If you have an eligible device running Windows 11, version 22H2 and are interested in experiencing these features today, open Windows Update settings, select Check for updates, and install the “2023-02 Cumulative Update Preview”. New app experiences will be delivered through Microsoft Store updates, and can be accessed by opening the Microsoft Store app on your device and then selecting Library > Get updates.

    To learn more about the new experiences coming in March, see Panos Panay’s post on the Windows Experience Blog. If you are an IT admin and want to explore new experiences for your organization and find details on how to configure the rollout for select features, visit the Windows IT Pro Blog.

    Note: A device reboot is required to enable new features. New feature availability might vary by market.
    		2023-02-28
    06:00 PT
    February skilling snacks: Bite-sized learning for IT pros
    A new free learning series is available for IT pros on a variety of topics: Windows skilling snacks: bite-sized learning for IT pros. These weekly selections of already existing, public resources are packaged in a way that is easy to consume in under two hours. It’s meant for all skill levels: those who are new to IT and seasoned vets looking for refresher or mentoring materials. Take advantage of the following topics published between the start of the series and the end of February:

    Bookmark the series library post to catch up on the topics that are of most interest to you and at a time that’s most convenient for you: Windows skilling snacks: bite-sized learning for IT pros.
    		2023-02-27
    14:00 PT
    Commercial control for continuous innovation
    Beginning with Windows 11, version 22H2, new features and enhancements are delivered more frequently using servicing technology. We recognize the need for organizations to have control, stability, and productivity. As a result, select features delivered via servicing will be “off” by default for those using Windows Update for Business or Windows Server Update Services to manage when and how Windows updates are offered to managed devices. These features will then be included in the next annual feature update. Organizations wishing to turn on these features ahead of the next annual feature update can do so by enabling a new client policy. For details, see Commercial control for continuous innovation.
     
    For some features, we may introduce a policy specific to configuring that feature for managed devices. For example, in the March 2023 monthly quality update, we are adding the ability for users to search directly from the taskbar to help you more easily find apps, files, settings, and help content. A new policy is available for organizations that wish to configure the Windows 11 search experience on the taskbar for their users. To learn more, see Customizing search on the Windows 11 taskbar.
    		2023-02-24
    15:00 PT
    Windows Autopatch Configuration Change with End of Servicing for Windows 10 20H2
    On May 9th, 2023, Windows 10, version 20H2 will reach end of servicing. To help keep your registered devices protected and productive, Windows Autopatch will automatically update its Windows feature update policies to support the new minimum Windows OS version (Windows 10, version 21H2). This keeps Windows Autopatch managed devices supported and receiving monthly updates that are critical to security and the health of the Windows ecosystem.

    Windows Autopatch is a cloud service that automates updates for Windows, Microsoft 365 Apps for enterprise, Microsoft Edge, and Microsoft Teams, to improve security and productivity across organizations. Windows Autopatch will modify the Windows feature updates policies with the new minimum Windows OS version (Windows 10, version 21H2) between May 9th and May 30th, 2023. We recommend that IT admins review the number of devices running Windows 10, version 20H2 or below, so they can plan and communicate the potential Windows OS upgrade that will be triggered by Windows Autopatch in May. The Windows 10 feature updates report in Microsoft Intune can be used to see which devices are below the upcoming new minimum Windows OS version (Windows 10, version 21H2) supported in Windows Autopatch. While we recommend that managed devices run the minimum Windows OS version to keep receiving the latest security updates, IT admins can pause and resume Windows Autopatch feature update deployments as needed.

    For more information on how Windows Autopatch implements its Windows feature update policies, see Enforcing a minimum Windows OS version.
    		2023-02-23
    10:00 PT
    February 2023 Windows non-security preview release is available for some versions of Windows
    The February 2023 non-security preview release is now available for Windows 11, version 21H2, and all supported versions of Windows 10. The preview update for Windows 11, version 22H2, will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 and Windows 10 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    Highlights for the Windows 11, version 21H2 update:
     
    • This update adds an advanced auto-learning feature for facial recognition.
    • This update addresses an issue that affects the Color filters setting. When you select Inverted, the system sets it to Grayscale instead.
    • This update addresses an issue that affects IE mode. The text on the status bar is not always visible.
    • This update addresses an issue that stops hyperlinks from working in Microsoft Excel.
    • This update addresses an issue that affects a certain streaming app. The issue stops video playback after an advertisement plays in the app.
    		2023-02-21
    14:00 PT
    Reminder: Windows Distributed Component Object Model (DCOM) hardening changes coming March 14, 2023.
    As previously announced, security requirements have increased for Windows devices that use the Distributed Component Object Model (DCOM) or Remote Procedure Call (RPC) server technologies. DCOM clients attempting to establish connections to DCOM servers which have applied updates released June 14, 2022, or later, must support an authentication level of RPC_C_AUTHN_LEVEL_PKT_INTEGRITY and higher.

    Beginning March 14, 2023, it will no longer be possible to bypass authentication level enforcement by creating a registry key in the DCOM server. Any compatibility issues with the hardening changes must be resolved by this date.

    		2023-02-16
    10:00 PT
    Improvements to .NET Framework updates for Windows 11, version 22H2
    If you’re on Windows 11, version 22H2, you can now experience fewer reboots, more secure feature updates, and more control over Preview .NET Framework updates. Before this improvement, when you installed the latest OS feature update via Windows Update, .NET Framework updates would not automatically get installed. Now that we’ve integrated these updates into the Unified Update Platform or UUP-based feature update, you’ll now get current in one less reboot. Additionally, you’ll now have better control over optional updates from the Windows Update settings page.

    		2023-02-15
    14:00 PT
    Commercial driver and firmware servicing is publicly available
    Windows Update for Business deployment service now empowers organizations to access curated lists of recommended drivers, control the offering of drivers to different devices, and monitor the deployment status with intuitive reports. All Windows E3/E5/A3/A5 and Microsoft 365 Business Premium subscribers, as well as their developers, will now receive driver servicing right from Windows Update. To make this even easier, the deployment service is available in Microsoft Graph. Find additional details, as well as several partner testimonies, in Commercial driver and firmware servicing is publicly available. 
    		2023-02-15
    14:00 PT
    Take action: February 2023 security update available for all supported versions of Windows
    The February 2023 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. 
     
    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.
     
    REMINDER Today, February 14, 2023, the retired, out-of-support Internet Explorer 11 desktop application will be permanently turned off using a Microsoft Edge update on certain versions of Windows 10. See the Internet Explorer 11 desktop app retirement FAQ for more information.
     
    Highlights for the Windows 11 update: 
    • This security update includes improvements that were a part of update KB5022360 (released January 26, 2023).
    • This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
    Short on time? Watch our short Windows 11 update release notes video for this month's tips.
    		2023-02-14
    10:00 PT
    Microsoft Update Compliance reporting is retiring. Enroll in Windows Update for Business reports today.
    Windows Update for Business reports is the evolution of Microsoft's Update Compliance reporting solution. As previously announced, organizations using Update Compliance must enroll in Windows Update for Business reports by February 14, 2023, to continue receiving reports. 

    Designed for rapid innovation, Windows Update for Business reports is a new experience, combining organizational and device-level reporting with actionable data and insights. Reports include:

    • Quality updates: Monitor security updates across all devices, including expedited updates.
    • Feature updates: Monitor feature updates across all devices, including end of servicing, applicable safeguards, and Windows 11 eligibility reporting.
    • Delivery optimization (preview): Bandwidth savings % across all content-types with additional reporting for devices using Microsoft Connected Cache.
    If your organization is using Update Compliance, enroll in Windows Update for Business reports today to avoid any workflow or dependencies disruption. Update Compliance is no longer an active solution, and will not be usable after March 2023. To learn more, see Now generally available: Windows Update for Business reports.
    		2023-02-14
    10:00 PT
    Install Quick Assist from the Microsoft Store without a UAC prompt
    Quick Assist is a handy tool that lets family and friends work together over a remote connection to solve PC problems. In addition to the improvements we announced in Try an improved Quick Assist experience, Quick Assist will no longer show a User Account Control (UAC) prompt when you download and install it from the Microsoft Store. This can help users download Quick Assist without administrator rights – something they couldn't do before. Download the February cumulative Windows update to get this change. 
    		2023-02-14
    10:00 PT
    The IE11 desktop application is permanently disabled beginning today, February 14, 2023
    As previously announced, the out-of-support Internet Explorer 11 (IE11) desktop application will be permanently disabled on certain versions of Windows 10 starting today, February 14, 2023. Devices that have not already been redirected from IE11 to Microsoft Edge will be redirected with today’s Microsoft Edge update. As is usual, this update will be rolled out over the span of a few days up to a week via Microsoft Edge’s progressive rollout.
     
    As a reminder, IE11 has been out of support since June 15, 2022. Organizations that have already transitioned from IE11 to Microsoft Edge with IE mode will not be impacted by the disablement. Organizations that have not transitioned to Microsoft Edge with IE mode may face immediate business disruption. If you do experience any issues accessing an IE-based site after IE11 permanent disablement, you can add the missed site to your IE mode list to quickly fix the issue. If the issue persists, open a support ticket.

    Removal of IE11 visual references, such as the IE11 icons on the Start Menu and taskbar, will begin after with the May non-security preview release, currently scheduled for May 23, 2023, and will be included in all subsequent Windows updates. For complete details, see the Internet Explorer 11 desktop app retirement FAQ.
    		2023-02-14
    08:00 PT
    Extended Security Updates (ESU) for Windows Server 2008 and 2008 R2 on Azure
    Organizations that need additional time to upgrade and modernize their Windows Server 2008 and 2008 R2 environments on Azure can obtain an additional year of Extended Security Updates (ESU). These ESU will be available for Azure environments only, beginning on February 14, 2023 and ending on January 9, 2024. This also applies to Azure Stack HCI, Azure Stack Hub, and other Azure products. For more details on this Windows Server offering, see Procedure to continue receiving security updates after extended support ends on January 10, 2023. To learn more about ESU, see Obtaining Extended Security Updates for eligible Windows devices.
    		2023-02-13
    14:00 PT
    Get ready for the first UUP on premises updates coming in March
    If you manage your devices on premises with Windows Server Update Services (WSUS) or Microsoft Configuration Manager, plan to update your Windows 11, version 22H2 devices using the Unified Update Platform (UUP) quality updates, starting March 28. The much-improved default experience comes with a sizeable initial download to distribution points to set the stage for small and easy updates going forward. Learn about the benefits and your readiness for this servicing transition in Get ready for the first UUP on premises updates coming in March. 
    		2023-02-09
    14:00 PT
    UPDATED: Microsoft Edge to replace built-in PDF engine with Adobe Acrobat PDF engine
    Updated March 23, 2023: We have updated the content below with additional and changed information. See the links for the complete details on all changes.

    As part of the Adobe and Microsoft collaboration to re-envision the future workplace and digital experiences, we are natively embedding the Adobe Acrobat PDF engine into the Microsoft Edge built-in PDF reader. With the use of the Adobe Acrobat PDF engine, users will have a unique PDF experience that includes higher fidelity for more accurate colors and graphics, improved performance, strong security for PDF handling, and greater accessibility – including better text selection and read-aloud narration. There will be no loss of functionality with the use of the Adobe Acrobat PDF engine and these capabilities will continue to be free of cost. Organizations with Microsoft 365 E5 subscriptions can also view and validate certificate-based signatures and view PDF files protected through Microsoft Information Protection (MIP) at no extra cost.

    Organizations with an existing Adobe Acrobat subscription can use the no-cost extension inside Microsoft Edge to unlock their subscription features – such as the ability to edit text and images, convert PDFs to other file formats, and combine files. Those who do not have an Adobe Acrobat subscription can purchase a license that enables access to these advanced features inside Microsoft Edge via an extension. There is no requirement to purchase an Adobe Acrobat subscription to use the Microsoft Edge built-in PDF free capabilities. Learn more about the Microsoft and Adobe partnership at Microsoft Integration with Adobe | Adobe Acrobat, and read the official announcement at Microsoft Edge for business.
     
    		2023-02-08
    10:00 PT
    Date changes for new certificate-based authentication requirements on domain controllers
    New security requirements are coming to Windows Servers. These changes increase certificate mapping security requirements to address vulnerabilities discussed in CVE-2022-26923 and others. Servers that run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, will need to meet new certificate mapping requirements in order for authentication operations to succeed. Administrators should be aware of two key dates in 2023:
     
    • April 11, 2023: Updates released after this date will remove the ability to allow domain controllers to continue relying on weak certificate mapping, known as Disabled mode.
    • November 14, 2023: Updates released after this date will mandate that the new certificate security requirements are met, known as Full Enforcement mode.
    Beginning with updates released May 10, 2022 and later, warning messages are logged for authentication scenarios which will fail once the new security requirements are in place. This can help administrators identify compatibility issues ahead of the November 14, 2023 date. To help protect your environment, update all servers with the May 10, 2022 or later security release, and enable Full Enforcement mode on all domain controllers if no audit error logs are created on domain controllers.
     
    		2023-02-06
    14:00 PT
    New widget features available February 2023, only on Windows 11
    Windows continues to improve widgets experiences on Windows 11. New this month, you can expand the size of the widgets board via Expanded View. This feature enables allows you see more widgets and news content by increasing the widgets board from 2 columns to 4 columns. Expanded View builds on last year's improvements to widget notification settings, and updates to the widget board margins and visuals.

    To get this updated feature, you should update the Windows Web Experience Pack from the Microsoft Store. This occurs automatically for most devices.

    Please note, if you have installed the latest quality updates for Windows 11, versions 21H2 or 22H2, but still don’t see all the new widgets features, it might be because some are being made available over several weeks, and might not be available to everyone at once. Learn more about the newest widgets experiences in Stay up to date with widgets.
    		2023-02-03
    11:00 PT
    Final Reminder: Changes for the Windows Diagnostic data processor configuration
    As was previously announced, the January 2023 non-security preview release for Windows 10, versions 20H2, 21H2 and 22H2, and Windows 11, versions 21H2 and 22H2, introduced a significant change for enterprise Windows devices that have diagnostic data turned on. This change will also be included in the February 2023 security update and all future security updates for these Windows versions.

    In support of our plan to store and process EU Data for European enterprise customers in the EU, policies such as the “Allow commercial data pipeline” policy will no longer be used to configure data processor options. Instead, an organization-wide configuration based on Azure Active Directory (Azure AD) will determine Microsoft’s role in the data processing.

    For information on these changes and details on how to enable the Windows diagnostic data processor configuration option, see Significant changes coming to the Windows diagnostic data processor configuration.
    		2023-02-02
    14:00 PT
    Take action: OOB update to address issues with XPS documents in WPF-based readers
    Microsoft is releasing Out-of-band (OOB) updates today, January 31, 2023 for some versions of .Net Framework. This update addresses a known issue which might cause XPS documents which utilize structural or semantic elements like table structure, storyboards, or hyperlinks to not display correctly in WPF-based readers. The standalone packages for these out-of-band (OOB) updates are available on Microsoft Update Catalog. You can manually import these updates into Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. For WSUS instructions, see WSUS and the Catalog Site. For Configuration Manger instructions, see Import updates from the Microsoft Update Catalog. Note: The updates are not available from Windows Update and will not install automatically.

    For information on this issue and the Out-of-band updates to resolve it, please see KB5022083 Change in how WPF-based applications render XPS documents.
    		2023-01-31
    10:00 PT
    January 2023 Windows non-security preview release available for all supported versions for Windows
    The January 2023 non-security preview release is now available for all supported versions of Windows. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 and Windows 10 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases.

    Highlights for the Windows 11, version 22H2 update:
     
    • This update changes the experience for preview .NET Framework updates. After you install this update, all future preview (optional) .NET Framework updates will display on the Settings > Windows Update > Advanced options > Optional updates page.
    • Addresses an issue that affects searchindexer.exe, which randomly stops you from signing in or signing out.
    • Addresses a resource conflict issue between two or more threads (known as a deadlock). This deadlock affects COM+ applications.
    • Addresses an issue that might occur when the Input Method Editor (IME) is active. Applications might stop responding when you use the mouse and keyboard at the same time.
    • Addresses an issue that affects picture files you find using search on the taskbar. This issue stops you from opening those pictures.
    • Addresses an issue that stops you from searching for a file based on the file’s contents.
    		2023-01-26
    14:00 PT
    Microsoft Edge extends support on Windows Server 2012 and Windows Server 2012 R2 to October 2023
    Microsoft Edge version 109 released on the week of January 12th, 2023, will be the last supported version on Windows Server 2012 and Windows Server 2012 R2 (version 110 and later will be unavailable). Microsoft Edge version 109 on these platforms will receive critical security fixes and fixes for known exploit bugs until October 10, 2023. WebView2 Runtime version 109 will be supported in the same way on these platforms.

    As a reminder, Microsoft Edge version 109, and WebView 2 version 109 are the last versions to support Windows 7 Extended Security Update (ESU) and Windows 8/8.1. Microsoft Edge and WebView2 versions 109 will not receive new features or future security updates on Windows 7 and Windows 8/8.1. To get new versions of Microsoft Edge or the WebView2 Runtime with up-to-date functionality and security, upgrade to Windows 10 or later.

    		2023-01-26
    14:00 PT
    Reminder: The IE11 desktop application will be permanently disabled February 14, 2023
    As previously communicated, the out-of-support Internet Explorer 11 (IE11) desktop application is scheduled to be permanently disabled on certain versions of Windows 10 devices on February 14, 2023, through a Microsoft Edge update. Devices that have not already been redirected from IE11 to Microsoft Edge are scheduled to be redirected with the Microsoft Edge update scheduled for this date. This change is intended to provide a better user experience and help organizations transition their last remaining IE11 users to Microsoft Edge. As a reminder, IE11 has been out of support since June 15, 2022. 

    If your organization still has dependencies on IE11, you must take steps now to complete your transition before February 14, 2023, or risk business disruption at scale when users lose access to IE11-dependent applications. Organizations that have already transitioned from IE11 to Microsoft Edge with IE mode will not be impacted when the IE11 desktop application is permanently disabled on this date. IE11 visual references, such as the IE11 icons on the Start Menu and taskbar, will be removed by the June 2023 Windows monthly security update release (‘B’ release) scheduled for June 13, 2023, and will also be removed by the non-security preview release on certain Windows 10 versions scheduled for May 23, 2023. 

    For more information, please see the Internet Explorer 11 desktop app retirement FAQ.
    		2023-01-12
    14:00 PT
    Take action: January 2023 security update available for all supported versions of Windows
    The January 2023 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. 

    Highlights for the Windows 11 update: 
    • Addresses issues that affect the Local Session Manager (LSM). These issues might allow users who do not have admin rights to perform actions that only an admin can.
    • Addresses a known issue that affects apps that use Microsoft Open Database Connectivity (ODBC) SQL Server Driver (sqlsrv32.dll) to connect to databases, which might result in connection failures.
    Short on time? Watch our short Windows 11 update release notes video for this month's tips.
    		2023-01-10
    10:00 PT
    Take action: Additional guidance in CVE-2022-41099 for devices with WinRE
    Devices with Windows Recovery Environment (WinRE) will need to update the WinRE partition to address security vulnerabilities in CVE-2022-41099. Installing the update normally into Windows will not address this security issue in WinRE. For guidance on how to address this issue in WinRE, please see CVE-2022-41099.
    		2023-01-10
    10:00 PT
    Windows 8.1 has reached end of service
    As previously announced, Windows 8.1 has reached end of support. Technical assistance and software updates will no longer be provided beyond January 10, 2023. If you have devices running Windows 8.1, we recommend upgrading them to a more current, in-service, and supported Windows release. If a device does not meet the technical requirements to run a more current release of Windows, we recommend that you replace the device with one that supports Windows 11. Microsoft will not be offering an Extended Security Update (ESU) program for Windows 8.1.

    Continuing to use Windows 8.1 might increase an organization’s exposure to security risks or impact its ability to meet compliance obligations. Review the details and answers to questions at the Microsoft Support entry Windows 8.1 support will end on January 10, 2023.
    		2023-01-10
    10:00 PT
    Take action: OOB update to address issues with new VMs managed by SCVMM and using Software Defined Networking (SDN)
    Microsoft is releasing Out-of-band (OOB) updates today, December 20, 2022. This update addresses a known issue which might cause new virtual machines (VMs) or new network adapters for existing VMs to have issues when using Software Defined Networking (SDN) managed by System Center Virtual Machine Manager (VMM). To resolve this issue, you will need to install one of the updates below on all Hyper-V hosts in your environment which are affected by this issue. You do not need to install any update or make any changes to other servers or client devices in your environment to resolve this issue.

    To get the standalone package for these out-of-band (OOB) updates, search for the KB number in the Microsoft Update Catalog. You can manually import these updates into Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. For WSUS instructions, see WSUS and the Catalog Site. For Configuration Manger instructions, see Import updates from the Microsoft Update Catalog. Note: The updates below are not available from Windows Update and will not install automatically.

    Cumulative updates:
    Note: You do not need to apply any previous update before installing these cumulative updates. If you have already installed updates released December 13, 2022, you do not need to uninstall the affected updates before installing any later updates including the updates listed above.
    		2022-12-20
    14:00 PT
    New details on IE11 desktop application permanent disablement scheduled for February 14, 2023
    The out-of-support Internet Explorer 11 (IE11) desktop application is scheduled to be permanently disabled on certain versions of Windows 10 devices on February 14, 2023, through a Microsoft Edge update, not a Windows update as previously communicated. All remaining devices that have not already been redirected from IE11 to Microsoft Edge are scheduled to be redirected with the Microsoft Edge update scheduled for February 14, 2023. The change to use Microsoft Edge update to disable IE is intended to provide a better user experience and help organizations transition their last remaining IE11 users to Microsoft Edge. As a reminder, IE11 has been out of support since June 15, 2022. 
     
    Organizations that have already transitioned from IE11 to Microsoft Edge with IE mode will not be impacted when the IE11 desktop application is scheduled to be permanently disabled on February 14, 2023. Note: If you would like to remove the IE visual references such as on the taskbar or Start Menu, you will need to use the Disable IE policy before February 14, 2023. If your organization still has dependencies on IE11, you must take steps now to complete your transition before February 14, 2023, or risk business disruption at scale when users lose access to IE11-dependent applications. 
     
    IE11 visual references, such as the IE11 icons on the Start Menu and taskbar, will be removed by the June 2023 Windows monthly security update release (‘B’ release) scheduled for June 13, 2023. They will also be removed by the non-security preview release on certain Windows 10 versions scheduled for May 23, 2023. For more information, please read the FAQ.
    		2022-12-16
    08:00 PT
    Feature and expedited update management generally available in Intune
    The general availability of feature and expedited quality updates in Microsoft Intune brings with it new features that allow you to easily manage updates and accompanying reports. These features use the Windows Update for Business deployment service to provide greater control over specifying updates to devices. Additional rich reporting provides detailed status and error state for each device in the policy. Learn about these capabilities and best practices for managing Windows updates in Intune in the new blog post Generally available: feature and expedited updates in Intune.
    		2022-12-16
    08:00 PT
    Microsoft Edge version 109 will be the last version to support Windows 7 ESU and Windows 8
    The upcoming Microsoft Edge version 109 - scheduled for release on the week of January 12th, 2023 - will be the last version to support Windows 7 Extended Security Update (ESU) and Windows 8/8.1. This also applies to WebView2 Runtime version 109, which is releasing this same week and is also ending support on these Windows versions.

    This aligns with the end of support for Windows 7 ESU and Windows 8/8.1 on January 10th, 2023. 
     
    Microsoft Edge and WebView2 versions 109 and earlier will continue to work on Windows 7 and Windows 8/8.1, but will not receive new features or future security updates. To get new versions of Microsoft Edge or the WebView2 Runtime with up-to-date functionality and security, please upgrade to Windows 10 or later. For additional details on support for various operating systems, see Microsoft Edge and WebView2 ending support for Windows 7 and Windows 8/8.1.
    		2022-12-14
    14:00 PT
    Recommendations for scenarios requiring Transport Layer Security (TLS) 1.1 and below
    Beginning September 2022, Microsoft disabled Transport Layer Security (TLS) 1.0 and 1.1 by default for Internet Explorer and EdgeHTML. Please note, Microsoft has not deprecated these versions of TLS - they are only disabled by default. 

    Although organizations and home users have the option to turn it back on through Group Policy or Internet Options, we do not recommend doing so. TLS 1.1 and below are vulnerable to various attacks, and are no longer considered secure. If an application fails due to the new TLS default, please check if a newer version of the application is available before enabling TLS 1.1 and 1.0. If one is not available, consider asking the app developer to make configuration changes in the app to remove dependency on these versions of TLS.

    TLS fallback is also an option to help keep devices secure by enabling applications to fall back to TLS1.0 and below if connections are made using a TLS version with secure protocols (TLS 1.2 and above). To enable TLS fallback, changes are required on the Windows registry. For instructions on these changes, see our updated documentation at KB5017811 - Manage Transport Layer Security (TLS) 1.0 and 1.1 after default behavior change in September 20, 2022.
    		2022-12-14
    14:00 PT
    December 2022 security update available for all supported versions of Windows
    The December 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. 

    IMPORTANT: There will be no preview, non-security “C” releases for Windows 10 or Windows 11 during the month of December. The "C" releases normally target the third week of the month.

    Highlights for the Windows 11 update: 
    • Addresses a known issue that might affect Task Manager, which might display certain elements in unexpected colors if you have "Choose your mode" set to "Custom" in the Colors section of Settings.
    • Includes quality improvements to the servicing stack, which is the component that installs Windows updates.
    Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 update.
    		2022-12-13
    10:00 PT
    Windows 10, version 21H1 has reached end of servicing
    As of December 13, 2022, all editions of Windows 10, version 21H1 have reached end of servicing. The December 2022 security update, released on December 13, is the last update available for this version. Devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

    To help keep you protected and productive, Windows Update will automatically initiate a feature update to Windows 10, version 22H2 for consumer devices and non-managed business devices when they are nearing or have reached end of servicing. This allows your device to continue to receive monthly updates that are critical to security and ecosystem health. For this automatic installation, you can choose a convenient time for your device to restart and complete the update.

    As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the entry for Windows 10, version 21H1 end of servicing at the learn.microsoft.com lifecycle page, and Reminder: End of servicing for Windows 10, version 21H1 at Windows IT Pro blog. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.
    		2022-12-13
    10:00 PT
    Try an improved Quick Assist experience
    Install the Windows 11 or Windows 10 December 2022 quality update for a seamless and improved Quick Assist experience. Whether you use the Microsoft Store app or the original app, you can help your clients, colleagues, family, and friends with their PC problems over a remote connection. This update ensures the best experience no matter the source of your app and introduces a new requirement: Edge WebView2. Learn about the details and resources that you need to start using the improved Quick Assist in our new IT Pro blog post Try an improved Quick Assist experience.
    		2022-12-13
    10:00 PT
    Reminder: Windows 8.1 support ends on January 10, 2023
    As previously announced, Windows 8.1 will reach the end of support on January 10, 2023. Technical assistance and software updates will no longer be provided beyond this date. If you have devices running Windows 8.1, we recommend upgrading them to a more current, in-service, and supported Windows release. If a device does not meet the technical requirements to run a more current release of Windows, we recommend that you replace the device with one that supports Windows 11. Microsoft will not be offering an Extended Security Update (ESU) program for Windows 8.1. Continuing to use Windows 8.1 after January 10, 2023, might increase an organization’s exposure to security risks or impact its ability to meet compliance obligations.

    Review the details and answers to questions at the Microsoft Support entry Windows 8.1 support will end on January 10, 2023.
    		2022-12-12
    14:00 PT
    New features coming to Windows 11 widgets
    Windows 11 continues to improve widgets experiences with additions to widget viewing options, badging, and layout.

    • Adjust widgets taskbar settings for badging, rotation, and hover: you can control whether widget notifications appear on your taskbar through the widgets settings. Select the profile icon in the top right corner of the widgets board and use the toggles to adjust your notification settings. 
    • Updates to the header, margins, and greetings: you might see some different positions for the widgets board header. The new layout aims to bring consistent, clean, and accessible icons to communicate action and features with simple visuals. 
    To get this updated feature, you should update the Windows Web Experience Pack from the Microsoft Store. This occurs automatically for most devices.

    Please note, if you have installed the latest quality updates for Windows 11, versions 21H2 or 22H2, but still don’t see all the new widgets features, it might be because some will roll out over several weeks, and might not be available to everyone at once. Learn more about the newest widgets experiences in Stay up to date with widgets.
    		2022-12-12
    14:00 PT
    Reminder: January 2023 changes for the Windows Diagnostic data processor configuration
    Beginning with the January 2023 release preview cumulative update for Windows 10, versions 20H2, 21H2 and 22H2, and Windows 11, versions 21H2 and 22H2, we’re introducing a significant change for enterprise Windows devices that have diagnostic data turned on. In support of our plan to store and process EU Data for European enterprise customers in the EU, we will stop using policies, such as the “Allow commercial data pipeline” policy, to configure data processor options and introduce an organization-wide configuration based on Azure Active Directory (Azure AD) to determine Microsoft’s role in the data processing.

    For information on these changes and details on how to enable the Windows diagnostic data processor configuration option, see Significant changes coming to the Windows diagnostic data processor configuration.
    		2022-12-09
    14:00 PT
    Advance your security posture with Microsoft Intune from chip to cloud
    Advance your security posture with Microsoft Intune from chip to cloud is now available on MS Learn to IT admins, security engineers, and security operations analysts for up to 1200 experience points. This new learning module encourages a proactive approach to Windows servicing by providing step-by-step guidance with screenshots and assessments. After completing this module, you will better understand Microsoft Intune as one of the modern device management tools, learn how to enable Zero Trust from chip to cloud, and advance and measure your organization's security posture. Visit our IT Pro Blog summary at New on Microsoft Learn: Advance your security posture from chip to cloud.
    		2022-12-09
    14:00 PT
    Update Compliance is no longer available. Use Windows Update for Business reports.
    Update Compliance is no longer an active solution, giving way to Windows Update for Business reports instead. We no longer allow new enrollments into Update Compliance nor the option to regenerate or generate a new CommercialID. To facilitate transition, current users can continue to use Update Compliance until March 31, 2023.

    Windows Update for Business reports is built based on the feedback of many Update Compliance users and all who have participated in the preview. With a revamped user experience, richer update deployment data and better alert monitoring, we are confident that these new reports will help you better manage your update compliance goals. Learn how to transition to the new and improved solution at Now generally available: Windows Update for Business reports.
    		2022-12-08
    14:00 PT
    Reminder: Windows Distributed Component Object Model (DCOM) hardening changes as of November 8, 2022
    As previously announced, security requirements have increased for Windows devices that use the Distributed Component Object Model (DCOM) or Remote Procedure Call (RPC) server technologies. DCOM clients attempting to establish connections to DCOM servers which have applied updates released June 14, 2022, or later, must either support an authentication level of RPC_C_AUTHN_LEVEL_PKT_INTEGRITY and higher.

    Updates released November 8, 2022, and later automatically raise authentication level for requests from DCOM clients to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY. Most Windows DCOM client applications will automatically work with the server side DCOM hardening change without modification to the DCOM client applications. As a reminder, it's possible to temporarily disable this authentication level enforcement by creating a registry key in the DCOM server. However, this will no longer be possible beginning March 14, 2023. We strongly recommend that IT administrators conduct testing by enabling hardening changes before this date to confirm normal operations.

    Our documentation has been updated with a new summary, as well as expanded details on the installation of the registry key implementation. See KB5004442—Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414)
    		2022-12-07
    13:30 PT
    We welcome your feedback
    Please take a moment and participate in this quick survey we’ve prepared as part of our continued effort to evolve the design and utility of the Windows release health hub. We greatly appreciate your feedback so we can focus on what matters most! Windows release health offers you official information on Windows releases and servicing milestones, known issues and safeguards, and helpful resources. This survey should only take about five minutes of your time to complete and will be available to fill out for a few extra days. Get started here.
    		2022-12-07
    13:30 PT
    November 2022 Windows non-security preview release available for all supported versions for Windows
    The November 2022 non-security preview release is now available for all supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 and Windows 10 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

    IMPORTANT: There will be no preview, non-security releases for Windows 10 or Windows 11 during the month of December. Preview releases normally target the third week of the month. There will be a December security update release, as usual.

    Highlights for the Windows 11, version 22H2 update:
     
    • Gives Microsoft OneDrive subscribers storage alerts on the Systems page in the Settings app. The alerts appear when you are close to your storage limit.
    • Provides the full amount of the storage capacity of all your OneDrive subscriptions. It also displays the total storage on the Accounts page in the Settings app.
    • Combines Windows Spotlight with Themes on the Personalization page. This makes it easier for you to discover and turn on the Windows Spotlight feature.
    • Addresses a known issue that affects the Input Method Editor (IME). Certain applications might stop responding. This occurs when you use keyboard shortcuts to change the input mode of the IME.
    • Addresses an issue that causes File Explorer to stop working. This occurs when you close context menus and menu items.
    		2022-11-29
    10:00 PT