Windows message center
Recent announcements
| Message | Date |
| The most personal Windows 11 experience begins to rollout today Last week we announced a new wave of capabilities that enhance accessibility, security, and the overall Windows 11 experience. Starting today, more innovation is available for devices running the latest update of Windows 11, version 22H2. Windows Backup makes it easier to back up and transfer files and settings to a new PC. Voice access now works right when you start your PC. You can utilize passkeys instead of passwords when you sign into a website or application that supports them. We’re also bringing the power of AI to your PC. Copilot in Windows (now in preview) helps you find answers and complete tasks quickly. Cocreator (also in preview) brings the power of generative AI to the Paint app. Photos offers new features, such as background blur, that make editing photos easy. Some of these features are available today. Others will roll out gradually so you may not see them right away. If you have an eligible device that is running Windows 11, version 22H2, and want to experience these innovations, you can navigate to the Windows Update settings page and turn on Get the latest updates as soon as they’re available. (Note: For more detail on availability, see How to get the latest Windows 11 innovations.) | 2023-09-26 10:00 PT |
| The September 2023 Windows non-security preview update is now available The September 2023 non-security preview update is now available. These optional non-security previews are released only for Windows 10, version 22H2 and Windows 11, versions 21H2 and 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X (formerly Twitter) @WindowsUpdate. Highlights for the Windows 11, version 22H2 update:
IMPORTANT The September 2023 non-security preview update will be the last optional release for Windows 11, version 21H2. The October 2023 security update will be the last security release for some editions of Windows 11, version 21H2. Windows 11, version 22H2 will continue to receive security and optional releases. | 2023-09-26 10:00 PT |
| Where organizations can find trusted information on Windows Take a quick tour of Windows technical documentation on Microsoft Learn, Windows release health, and other resources that offer the information you and your organization need to better manage your Windows estate. We'll delve into how documentation is created--and how you can contribute to better docs! Ready to learn? See Tackling Tech: Behind the scenes with Windows docs and trusted information. And, for links to the resources discussed in this episode, see our skilling snack on Windows information and resources for IT pros. | 2023-09-25 10:00 PT |
| Tackling Tech: Windows LAPS If your organization needs to store local admin account passwords safely, Windows Local Administrator Password Solution (LAPS) can help! Dive into what Windows LAPS is, how it works, and why it’s useful to you! Check out the conversation at Keeping passwords secure with Windows LAPS. | 2023-09-22 13:00 PT |
| Windows Office Hours: September 28th, 2023 If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams stand by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the September 28th session of Office Hours? Click here to add it to your calendar and log in to the Tech Community to post your questions early! You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you. | 2023-09-22 10:00 PT |
| Expanding our AI capabilities to meet the everyday needs of people and business Today, Microsoft took the first step to unify our AI capabilities as Microsoft Copilot, providing a consistent look and feel across our products. Available as a side pane in Microsoft applications like Microsoft 365 and Edge, and on your Windows taskbar, the Copilot icon will be a consistent experience and entry point. To learn more about the new Copilot experience, and the updates we are bringing to Windows 11, Microsoft 365, Bing, Microsoft Edge, and Surface, read today’s announcement on Ushering in a new era of AI with Copilot from Microsoft designed to empower people across work and life. | 2023-09-21 08:00 PT |
| Take action: September 2023 security update is now available The September 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X (formerly Twitter) @WindowsUpdate. Highlights for the Windows 11 update:
IMPORTANT The September 2023 non-security preview update will be the last optional release for Windows 11, version 21H2. The October 2023 security update will be the last security release for some editions of Windows 11, version 21H2. Windows 11, version 22H2 will continue to receive security and optional releases. Short on time? Watch our short Windows 11 update release notes video for this month's tips. | 2023-09-12 10:00 PT |
| Reminder: Security hardening changes for Netlogon and Kerberos effective October 10, 2023 Windows updates release November 8, 2022 and later include changes that address security vulnerabilities affecting Windows Server domain controllers (DC). Among the addressed vulnerabilities is a Kerberos security bypass and elevation of privilege scenario involving alteration of Privilege Attribute Certificate (PAC) signatures. Changes to address this issue have been released following a series of phases throughout 2023, and are reaching the final stage of enforcement in October. Administrators should observe changes which affect Kerberos protocol requirements and are coming into effect with the Windows updates released on and after October 10, 2023. October 10, 2023 - Full Enforcement phase Windows updates released on and after this date will have the following effect:
The phase described above is the final phase of these security hardening measures. All domain-joined, machine accounts are affected by these vulnerabilities. To understand the options available for configuring these security requirements in your environment, see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 | 2023-09-11 10:00 PT |
| The Windows release health experience is now available for GCC tenants Now, eligible Government Community Cloud tenants can access essential information about Windows update known issues and announcements on the Microsoft 365 admin center. IT admins in the public sector can check prerequisites for access, learn about the available types of content and notifications, and follow steps to configure these preferences to stay informed. A new article shares details, instructions, links for further help, and guidance to provide feedback. Read it at Check Windows issues information in the admin center. | 2023-09-07 10:00 PT |
| Interim guidance for Greenland DST changes 2023 According to the new law by the government of Greenland, this year, the country will not switch to Daylight Saving Time. Instead, Greenland’s standard time will permanently shift to UTC-2, which is the same time that has been observed since March 25, 2023. In 2024, Greenland will resume annual Daylight Saving Time between March and October by temporarily shifting from UTC-2 to UTC-1. In support of this decision, Microsoft will release Windows updates in late September, 2023 to the latest versions of Windows 11 and Windows 10. All other supported versions of Windows will receive the update as part of the October 2023 monthly quality release. Please visit Interim guidance for Greenland DST changes 2023 for further details. | 2023-09-06 10:00 PT |
| Interim guidance for Syria DST changes 2023 On October 5, 2022, the Syrian government made an official announcement about a Daylight Saving Time (DST) time zone change. Since then, the official time has not advanced by an hour and has permanently shifted to the UTC+3 time zone. Microsoft is releasing updates to support this change. The October 22, 2023 non-security preview release includes the update for Windows 11 and Windows 10, version 22H2. All other supported versions of Windows will receive this time adjustment in the November 14, 2023 monthly quality release. Read Interim guidance for Syria DST changes 2022 for more details. | 2023-09-06 10:00 PT |
| TLS 1.0 and TLS 1.1 will be disabled in future Windows OSes Transport Layer Security (TLS) is the most common internet protocol for setting up an encrypted channel of communication between a client and server. Over the past several years, internet standards and regulatory bodies have deprecated or disallowed TLS versions 1.0 and 1.1, due to a variety of security issues. As such, future Windows operating systems will have TLS versions 1.0 and 1.1 disabled by default. This change applies only to future new Windows operating systems, both client and server editions. Windows versions that have already been released will not be affected by this change. Windows 11 Insider Preview builds starting in September 2023 will have TLS versions 1.0 and 1.1 disabled by default. There is an option to re-enable TLS 1.0 or TLS 1.1 for users who need to maintain compatibility. Home users of Windows are unlikely to experience any issues related to this change. Enterprises will need to test their environment to detect and update or replace any affected apps. For information on this change, please see TLS 1.0 and TLS 1.1 soon to be disabled in Windows. | 2023-09-01 10:00 PT |
| Expanded metadata in Windows Update for Business deployment service catalog IT admins can now make better update management decisions with insights from expanded metadata. Windows Update for Business deployment service has expanded its catalog. The main improvements include greater detail about each update and a wider spectrum of update types. Expanded metadata is available for security, non-security, and out-of-band updates. A new article shows how to make Microsoft Graph API calls to retrieve update classification, cadence, naming, vulnerabilities, and revision details. See guidance and examples at Enhance update management decisions with metadata and insights. | 2023-08-31 10:00 PT |
| Reminder: Windows 11, version 21H2 end of servicing (Home & Pro) On October 10, 2023, Home and Pro editions of Windows 11, version 21H2 will reach end of servicing. The upcoming October 2023 security update, to be released on October 10, 2023, will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats. To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 11 consumer devices and non-managed business devices that are at, or within several months of reaching, end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update. As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 21H2 end of servicing (Home & Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool. IMPORTANT The September 2023 non-security preview update will be the last optional release and the October 2023 security update will be the last security release for Windows 11, version 21H2. Windows 11, version 22H2 will continue to receive security and optional releases. | 2023-08-31 10:00 PT |
| August skilling snacks See what’s new in our special learning series on all things Windows. These selections of already existing, public resources are packaged in a way that is easy to consume in under two hours each. This professional development opportunity is meant for all skill levels: those who are new to IT and those looking for a refresher or mentoring materials. Take advantage of the following learning bites published in the month of August:
Bookmark our growing topics library for personalized learning: Windows skilling snacks: bite-sized learning for IT pros. It currently contains over 20 learning journeys, and new topics are published every other week. | 2023-08-29 10:00 PT |
| Israel 2024 time zone update now available A new Windows update is available to address a known issue for Israel’s Daylight Saving Time (DST). The issue affects events scheduled for March 2024 and onwards. The fix is available in the non-security preview update released on August 22, 2023 for the 20H2 and newer versions of Windows 10 and Windows 11. All other supported Windows versions will receive the update as part of the September 2023 monthly quality update scheduled for September 12, 2023. Read Israel 2024 time zone update now available for more information. | 2023-08-24 11:00 PT |
| Reminder: Microsoft Edge for Business is available in Edge version 116 Microsoft Edge for Business, the new, dedicated work experience, is now available in Microsoft Edge stable version 116. All users who sign in to Edge using Microsoft Entra ID (formerly Azure Active Directory) will automatically be transitioned to Microsoft Edge for Business as part of the release. Upon first opening Edge after the update, users will see an in-product banner informing them of the change with a link to learn more. Microsoft Edge for Business includes new visual elements, an adjusted icon, and optional personal browsing window so users with a personal profile can separate their work and personal browsing. Policies, settings, and configurations previously set by an organization and its Entra ID connected users will be maintained in the transition to Edge for Business. There is no impact to users' default browser settings. Additionally, passwords, favorites, and data currently associated with the user’s work profile will be transferred to Edge for Business. Read the Microsoft Edge for Business FAQ for more in-depth information. | 2023-08-22 10:15 PT |
| The August 2023 Windows non-security preview update is now available The August 2023 non-security preview update is now available. These optional non-security previews are released only for Windows 10, version 22H2 and Windows 11, versions 21H2 and 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11, version 22H2 update:
| 2023-08-22 10:00 PT |
| Enable and control optional updates for your organization IT admins can now manage early adoption of new productivity features and fixes for Windows 11 with a new policy. You can set up the policy called “Enable optional updates” to allow users in your organization to receive optional updates with different levels of control. They can either automatically receive optional updates, including or not gradual feature rollouts or CFRs, or manually select what optional updates to receive. Learn more about the details and benefits of this policy, along with tips to support user readiness in Enable and control optional updates for your organization. | 2023-08-22 10:00 PT |
| Windows Office Hours: August 17th, 2023 If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams stand by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the August 17th session of Office Hours? Click here to add it to your calendar and log in to the Tech Community to post your questions early! You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you. | 2023-08-10 10:00 PT |
| Take action: August 2023 security update is now available The August 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11 update:
Short on time? Watch our short Windows 11 update release notes video for this month's tips. | 2023-08-08 10:00 PT |
| Drivers and firmware management on Window Autopatch New capabilities for deploying drivers and firmware are coming to Windows Autopatch-enabled tenants. Using Microsoft Intune's recently released driver management capabilities, you can better manage and report on drivers and firmware updates. With this upcoming feature, Windows Autopatch will configure the deployment of required drivers and firmware available through Windows Update to your Windows Autopatch devices. If you are an existing Windows Autopatch customer, you should see this by August 14. General availability is being released in phases and is planned to conclude by this date. See Windows Autopatch: Manage Driver and Firmware Updates for more details. If you are not currently using Windows Autopatch and are interested in learning more about this service, consider reading the report commissioned from Forrester: New Technology: The Projected Total Economic Impact™ Of Windows Autopatch. You can also read our Windows Autopatch overview on Microsoft Learn. | 2023-08-03 11:00 PT |
| July skilling snacks: Bite-sized learning for IT pros Our special learning series now includes 6 months’ worth of IT pro topics for continued professional development. These selections of already existing, public resources are packaged in a way that is easy to consume in under two hours each. It’s meant for all skill levels: those who are new to IT and those looking for a refresher or mentoring materials. Take advantage of the following learning bites published in the month of July:
Bookmark our growing topics library for personalized learning: Windows skilling snacks: bite-sized learning for IT pros. New topics are published on a biweekly basis. | 2023-07-28 10:00 PT |
| Help users resume your app seamlessly after a Windows update App developers: you can now find best practices for helping users easily resume a Windows app after a restart. Several native APIs can help you save the user’s state, remember how their previous views were positioned, and relaunch the app following the update. Helpfully, the article includes code examples and useful GitHub links to work with UWP apps, Win32 apps, and .NET apps. Get these details at Help users resume your app seamlessly after a Windows update. | 2023-07-28 10:00 PT |
| The July 2023 Windows non-security preview update is now available for Windows 11, version 22H2 The July 2023 non-security preview update is now available for Windows 11, version 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11, version 22H2 update:
| 2023-07-26 10:00 PT |
| Importing updates into WSUS is changing If you update devices in your organization with Windows Server Update Services (WSUS), the way you import updates has changed. Previously, you imported updates from the Microsoft Update Catalog site using the WSUS admin user interface under Updates > Actions. Starting July 25, 2023, this path takes you to a new PowerShell script instead. To learn how to get and use this script to import updates, please review the updated documentation in WSUS and the Microsoft Update Catalog and read the announcement Importing updates into WSUS is changing. | 2023-07-26 10:00 PT |
| The July 2023 Windows non-security preview update is now available for some versions of Windows The July 2023 non-security preview update is now available. These optional non-security previews are released only for Windows 11, versions 21H2 and Windows 10, version 22H2. The preview update for Windows 11, version 22H2, will be available in the near term. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11, version 21H2 update:
| 2023-07-25 10:00 PT |
| Windows Autopatch celebrates 1 year of managed updates Happy 1 year to Windows Autopatch! If you haven't yet explored, catch up on all the latest capabilities. New features include Autopatch groups, custom deployment rings, and policy naming. Organizations can also take advantage of more control over feature updates, the ability to opt out of Microsoft 365 apps or expedited Windows updates, and support for driver and firmware updates. The service also now offers improved reporting with increased visibility into policy health and remediations. Enhancements to Windows Autopatch will continue so, in the meantime, check out deep dives and demos; join the Windows Autopatch Tech Community for feedback, questions, and to request features; and finally, subscribe to Windows Autopatch blog updates for the latest on Autopatch! | 2023-07-20 10:00 PT |
| Bing Chat Enterprise rolling out in Preview starting today Starting today, Bing Chat Enterprise will be rolling out to eligible Microsoft 365 tenants in Preview—it will be turned off by default. Bing Chat Enterprise gives your organization AI-powered chat for work with commercial data protection. With Bing Chat Enterprise, user and business data are protected and will not leak outside the organization. What goes in—and comes out—remains protected. Your organization’s chat data is not saved, Microsoft has no eyes-on access to it, and it is not used to train the models. Learn more about Bing Chat Enterprise at Furthering our AI ambitions – Announcing Bing Chat Enterprise and Microsoft 365 Copilot pricing. | 2023-07-18 08:35 PT |
| Hotpatch is now available on new Windows Server 2022 Azure Edition VMs on Azure with the Desktop Experience Hotpatch is now available for Windows Server Azure Edition VMs with Desktop Experience installation mode using the newly released image. Hotpatch is a feature that allows you to patch and install OS security updates to Windows Server Azure Edition VMs on Azure without requiring a reboot! Hotpatching was previously available for the Server Core installation mode. Now, Windows Server Azure Edition VMs installed with the Desktop Experience installation mode (the Windows Explorer shell, Start Menu, etc.) will no longer reboot every month for security updates. This provides:
Try out Hotpatch today by using the new released images of Windows Server Azure Edition VMs on Azure. Learn more in Hotpatching is now available in preview for Windows Server VMs on Azure with Desktop Experience and the Hotpatch for new virtual machines documentation. | 2023-07-18 08:00 PT |
| 90-Day Reminder: Windows 11, version 21H2 end of servicing (Home & Pro) On October 10, 2023, Home and Pro editions of Windows 11, version 21H2 will reach end of servicing. The upcoming October 2023 security update, to be released on October 10, 2023, will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats. To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 11 consumer devices and non-managed business devices that are at, or within several months of, reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update. As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 21H2 end of servicing (Home & Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool. | 2023-07-14 10:00 PT |
| Windows client roadmap update: July 2023 Windows client roadmap updates help guide organizations with their planning processes. A new article announces that you’ll be able to update Windows 11, version 22H2 to version 23H2 via an enablement package (eKB). It means that you can continue (or begin) your Windows 11 rollout with version 22H2 now, without worrying about app or device compatibility in the fourth quarter of 2023. Additionally, IT admins can consider a new option for Windows 10 IoT Enterprise LTSC 2021. Starting August 1st, it will be available through Volume Licensing. Read these announcements and recommendations in Windows client roadmap update: July 2023. | 2023-07-13 11:00 PT |
| Take action: July 2023 security update is now available The July 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11 update: This update includes broad availability of the innovations in privacy, security, and productivity we announced at the end of May, which bring the following:
Short on time? Watch our short Windows 11 update release notes video for this month's tips. | 2023-07-11 10:00 PT |
| Take action: July 11, 2023 starts the Second Deployment Phase to address CVE-2023-24932 for devices using Secure Boot The release of the July 11, 2023 security updates for Windows starts the Second Deployment Phase in KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. KB5025885 contain the manual steps to verify your environment is ready for the changes and steps to enable the security hardening changes to protect against vulnerabilities tracked by CVE-2023-24932 that can bypass the Secure Boot security feature using the BlackLotus UEFI bootkit. The Second Deployment Phase in updates for Windows released July 11, 2023 or later add the following:
For information on how to apply the revocations and what is required before you apply the revocations, see KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. We recommend that all Windows users review this documentation carefully, including both IT administrators and consumers. | 2023-07-11 10:00 PT |
| Reminder: Security hardening changes for Netlogon and Kerberos effective July 11, 2023 The November 8, 2022 and later Windows releases include security updates that address security vulnerabilities affecting Windows Server domain controllers (DC). These protections follow a hardening change calendar and are released in phases. As previously announced, administrators should observe the following changes which are coming into effect following Windows updates released on and after June 13, 2023: Netlogon protocol changes:
Kerberos protocol changes:
All domain-joined, machine accounts are affected by these vulnerabilities. Review the below KB entries to understand the options available for configuring these changing security requirements in your environment, as well as monitor for warnings and issues. | 2023-07-11 10:00 PT |
| June skilling snacks: Bite-sized learning for IT pros Catch up on our special learning series for continued professional development in IT pro topics. These weekly selections of already existing, public resources are packaged in a way that is easy to consume in under two hours each. It’s meant for all skill levels: those who are new to IT and seasoned vets looking for refresher or mentoring materials. Take advantage of the following learning bites published in the month of June:
Bookmark our growing topics library for personalized learning of what and when you want: Windows skilling snacks: bite-sized learning for IT pros. Please note that new topics are now published on a biweekly basis. | 2023-06-30 10:00 PT |
| Expedite KPI in Windows Update for Business reports A new capability is available to IT admins to better monitor key performance indicators (KPI) of expedited security updates. The new KPI card under Windows Update for Business reports shows the progress across all devices within the deployments that target the latest security update. To check for this card in your tenant, visit Azure monitor > Workbooks > Windows Update for Business reports > Quality update. A new article provides guidance to track each expedited update deployment, view alerts, examine the device state, and to query the logs. Read it in Expedite KPI in Windows Update for Business reports. | 2023-06-29 15:00 PT |
| The June 2023 Windows non-security preview update is now available The June 2023 non-security preview update is now available. These optional non-security previews are released only for Windows 10, version 22H2 and Windows 11, versions 21H2 and 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11, version 22H2 update:
| 2023-06-28 14:00 PT |
| Manage Windows driver and firmware updates with Microsoft Intune We’re excited to announce the general availability of Windows driver and firmware update management policies and reports in Microsoft Intune. If you’re an IT admin with an Enterprise license, learn about new capabilities, benefits, and upcoming improvements in Manage Windows driver and firmware updates with Microsoft Intune. See how to create and manage driver update policies, as well as how to monitor and remediate issues with built-in reporting. These capabilities are built on the Windows Update for Business deployment service and are now integrated with Windows Autopatch. | 2023-06-26 14:00 PT |
| How Windows manages time zone changes Learn about the complexity of the processes that happen between a government Daylight Saving Time change announcement and the release of a quality fix. Read How Windows manages time zone changes for best practices for governments and IT pros to effectively collaborate in keeping the world synced. Specifically, government advance notice time should allow for the internal 8-week fix development period and reasonable time for organizations to update their devices. Organizations, in turn, are encouraged to promptly install security and preview updates to get the fix. | 2023-06-21 10:00 PT |
| Take action: June 2023 security update is now available The June 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11 update:
Short on time? Watch our short Windows 11 update release notes video for this month's tips. | 2023-06-13 10:00 PT |
| Reminder: Security hardening changes for Netlogon and Kerberos coming in June and July 2023 The November 8, 2022 and later Windows releases include security updates that address security vulnerabilities affecting Windows Server domain controllers (DC). These protections follow a hardening change calendar and are released in phases. As previously announced, administrators should observe the following changes which are coming into effect following Windows updates released on and after June 13, 2023: Netlogon protocol changes:
Kerberos protocol changes:
To check the guidance on how to protect your environment and prevent outages, see: KB5021130: How to manage the Netlogon protocol changes related to CVE-2022-38023 and KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967. | 2023-06-13 10:00 PT |
| Reminder: End of servicing for Windows 10, version 21H2 Home, Pro, Pro Education, and Pro for Workstations Starting today, June 13, 2023, Home, Pro, Pro Education, and Pro for Workstations editions of Windows 10, version 21H2 have reached end of servicing. The June 2023 security update - released June 13, 2023 - is the last update available for these versions. Devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats. To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of, reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update. As always, we recommend that you update your devices to the latest version of Windows 10 or upgrade eligible devices to Windows 11. For detailed information, see the Windows 10, version 21H2 end of servicing (Home & Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool. | 2023-06-13 10:00 PT |
| Customizing search on the Windows 11 taskbar for organizations and managed devices The Windows 11 taskbar search experience is coming to organizations and managed devices. This feature was originally released in March 2023, and beginning with the July 2023 optional non-security preview update, it will be released to managed devices running Windows 11, version 21H2. IT admins can manage the taskbar search experience for the devices in their organization using the DisableSearch policy. Additionally, the ConfigureSearchOnTaskbarMode policy offers options to hide the search bar by default, adjust icon settings, and more. Policies can be configured in Microsoft Intune by custom policy, and are available on Settings Catalog today. With the July 2023 optional non-security preview update, a search box will appear on the taskbar. The search experience is designed to assist users in finding things on their device, including apps, files, and settings. It can also help users quickly access the web for online information. For the full details on configuring this feature in your organization, see the Techcommunity post Customizing search on the Windows 11 taskbar. | 2023-06-12 10:00 PT |
| Windows Office Hours: June 15th, 2023 If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams stand by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the June 15th session of Office Hours? Click here to add it to your calendar and log in to the Tech Community to post your questions early! You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you. | 2023-06-08 10:00 PT |
| May skilling snacks: Bite-sized learning for IT pros Catch up on our special learning series for continued professional development in IT pro topics. These weekly selections of already existing, public resources are packaged in a way that is easy to consume in under two hours. It’s meant for all skill levels: those who are new to IT and seasoned vets looking for refresher or mentoring materials. Take advantage of the following learning bites published in the month of May:
Bookmark our growing topics library for personalized learning of what and when you want: Windows skilling snacks: bite-sized learning for IT pros. | 2023-05-30 14:00 PT |
| Coming soon to Intune: Windows driver and firmware updates Soon, you’ll be able to manage Windows driver and firmware updates in Microsoft Intune. A new blog article describes the advantages and new capabilities that will become generally available in June 2023. Driver update management policies and reports are built on the Windows Update for Business deployment service public preview and are part of the Windows Enterprise offerings. With it, you can take advantage of intelligent servicing, trusted quality, more granular controls, optional drivers and firmware, detailed reporting, and an integration with Windows Autopatch. Read Coming soon to Intune: Windows driver and firmware updates for more details. | 2023-05-25 10:00 PT |
| The May 2023 Windows non-security preview update is now available for Windows 11, version 22H2 The May 2023 non-security preview update is now available for Windows 11, version 22H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. If you have Home or Pro consumer devices or non-managed business devices that run Windows 11, version 22H2, you can get some of the new enhancements announced yesterday. Open Windows Update settings (Settings > Windows Update). Select Get the latest updates as soon as they are available. Set the toggle to On and select Check for updates. Note that the toggle won't be enabled for managed devices. These are managed by Windows Update for Business or Windows Server Update Services (WSUS). Highlights for the Windows 11, version 22H2 update:
| 2023-05-24 10:00 PT |
| The May 2023 Windows non-security preview update is now available for some versions of Windows The May 2023 non-security preview update is now available. These optional non-security previews are released for Windows 10, version 22H2 and Windows 11, versions 21H2 only. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11, version 21H2 update:
| 2023-05-23 10:00 PT |
| New Windows 11 innovations for privacy, security, and productivity Starting tomorrow, May 24th, new enhancements are coming to Windows 11 to improve professional and personal usability. We’re bringing privacy, security, and accessibility to your fingertips. Explore features a for secure, efficient IT management and intuitive user experience, such as new app privacy settings that allow you to enable presence-sensing for hands-free secure sign-in and disable it when you walk away. You’ll also see that Widgets now feature a larger layout with dedicated space for user-pinned apps and the ability to personalize your feeds to highlight the news you care about most. For developers building on Windows, we encourage you to read about even more new innovations announced at Microsoft Build. And, if you’re an IT administrator, there’s more to explore. Find out how we’re Expanding IT value in Windows 11 Enterprise and Intune. | 2023-05-23 08:00 PT |
| Attend Build 2023 to learn about Windows tools for developers If you’re a developer, get up to speed on current topics and tools at our annual Build event next week. The online portion will take place on May 23 and 24, 2023. You can explore the session catalog and read about the experts before building your unique learning agenda with the session scheduler. Select from a variety of Windows-related sessions focused on Windows Hybrid Apps, Microsoft Dev Box, Apps for ARM, among others, including multiple technologies from partners and startups. Register today and access the 30+ Windows sessions: Build session catalog for Windows. | 2023-05-19 10:00 PT |
| New details on IE11 desktop application next steps Based on customer feedback, Internet Explorer 11 (IE11) visual references, such as the IE11 icons on the Start Menu and taskbar, will no longer be removed by Windows update as previously communicated. Organizations will continue to maintain control over determining the timing to remove IE11 visual references from their devices, if they have not already done so, by using the Disable IE policy. Additionally, changes will be made over the next coming months to redirect a small subset of exceptional scenarios where IE11 is still accessible to Edge. This ensures users access a supported and more secure Microsoft browser. Details will be available in the Windows and Microsoft Edge release notes. As a reminder, IE11 has been out of support since June 15, 2022, and was permanently disabled on February 14, 2023. These changes are intended to provide a better user experience and smoothly transition users from IE11 to Microsoft Edge to ensure a faster, more secure, and more modern web experience. Read the FAQ to help answer your questions: Internet Explorer 11 desktop app retirement FAQ. | 2023-05-18 08:30 PT |
| Join Windows office hours on May 18, 2023, at 9:00 a.m. PT If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams stand by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. Want to attend the May 18th session of Office Hours? Click here to add it to your calendar and log in to the Tech Community to post your questions early! You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you. | 2023-05-17 10:00 PT |
| Changes to Windows Server security hardening for Netlogon and Kerberos coming July 11, 2023 Recent Windows updates released address vulnerabilities in the Netlogon protocol when remote procedure call (RPC) signing is used instead of RPC sealing. The Netlogon RPC interface is primarily used to maintain the relationship between a device and its domain, and relationships among domain controllers (DCs) and domains. All domain-joined, machine accounts are affected by these vulnerabilities. Guidance and documentation can be found at KB5021130: How to manage Netlogon protocol changes related to CVE-2022-38023. Please note, updates released April 11, 2023 and later have brought two important changes which can affect the testing and deployment processes which were previously documented for this hardening:
To help secure your environment, install Windows updates dated April 11, 2023 or later on all devices, including DCs. As always, we recommend that devices are kept up to date with the latest versions of Windows. Windows updates released on and after July 11, 2023 will fully enforce RPC sealing requirements - we strongly recommend that IT administrators conduct testing by enabling hardening changes before this date. For full details on these security hardenings and how to detect issues in your environment, see KB5021130: How to manage Netlogon protocol changes related to CVE-2022-38023. | 2023-05-15 14:00 PT |
| Reminder: End of servicing for Windows 10, version 21H2 Home, Pro, Pro Education, and Pro for Workstations On June 13, 2023, Home, Pro, Pro Education, and Pro for Workstations editions of Windows 10, version 21H2 will reach end of servicing. The upcoming June 2023 security update, to be released on June 13, 2023, will be the last update available for these versions. After this date, devices running these version will no longer receive monthly security and preview updates containing protections from the latest security threats. To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of, reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update. As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the Windows 10, version 21H2 end of servicing (Home & Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool. | 2023-05-12 10:00 PT |
| 30-Day Reminder: New hardening phase for addressing CVE-2022-37967 starts in June Security hardening changes needed on domain controllers in IT environments to address CVE-2022-37967 will enter the Third deployment phase, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 on June 13, 2023. Currently, it is still possible to bypass security hardening requirements using the guidance provided in KB5020805. However, beginning with the June 13, 2023 updates, the ability to bypass hardening measures will be reduced. To help protect your environment and prevent outages, we recommend that you update your Windows domain controllers with a Windows update released on or after November 8, 2022, move your Windows domain controllers to Audit mode by using the Registry Key setting, and enable enforcement mode as soon as possible. Additional deployment phases in July 2023 and October 2023 will raise the default minimum for the security hardening changes for CVE-2022-37967, and environments must be compliant before installing updates for each phase onto your domain controller. It is recommended to move to enforcement mode as soon as possible. For complete guidance, see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967. | 2023-05-12 10:00 PT |
| Join the webinar on Windows release information experiences Attend the upcoming webinar for IT admins on May 24, 2023! Windows release health is an information hub that empowers you to better manage Windows updates. It’s available publicly and through the Microsoft 365 admin center (authenticated portal). You can use it to find details about Windows known issues, safeguard holds, hardening changes, monthly updates, lifecycle updates, and new versions of Windows. In this Teams live event, you’ll learn to use these capabilities and the improvements we’ve made to your experience. Follow links to submit your questions and feedback in advance at What's new in Windows release information experiences, and complete the event registration form to join us on May 24, 2023. | 2023-05-10 13:00 PT |
| Take action: May 2023 security update is now available The May 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. Highlights for the Windows 11 update:
Short on time? Watch our short Windows 11 update release notes video for this month's tips. | 2023-05-09 10:00 PT |
| Take action: Additional guidance and manual steps required for devices using Secure Boot to address CVE-2023-24932 Security updates released May 9, 2023 and later contain security hardening changes to protect against vulnerabilities tracked by CVE-2023-24932 that can bypass the Secure Boot security feature using the BlackLotus UEFI bootkit. These hardening changes are available but not enabled by default in these updates. The security hardening for CVE-2023-24932 will be done in phases, as steps must be taken to prevent issues on your device when the revocations are applied/enabled, which is required to address CVE-2023-24932. For information on how to apply the revocations and what is required before you apply the revocations, see KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932. We recommend that all Windows users review this documentation carefully, including both IT administrators and consumers. | 2023-05-09 10:00 PT |
| Windows 10, version 20H2 has reached end of servicing - May 9, 2023 Starting today, May 9, 2023, all editions of Windows 10, version 20H2 have reached end of servicing. The May 2023 security update, released on May 9, is the last update available for this version. Devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats. To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update. As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the Windows 10, version 20H2 end of servicing (Enterprise, Education) lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool. | 2023-05-09 10:00 PT |
| Latest Windows hardening guidance and key dates If you’re an IT admin, you can consult the latest timeline of hardening changes as part of your security strategy. Last month, two areas entered their second hardening phase: Netlogon protocol, and certificate-based authentication. The article lists these and the following hardening changes through January 2024. Other vulnerable areas undergoing hardening in the upcoming months are Kerberos PAC signatures and Active Directory (AD) permissions. Read Latest Windows hardening guidance and key dates to find out details, KB numbers, and additional resources to help you prepare your organization for these changes. | 2023-05-08 10:00 PT |
| Iran 2023 time zone update now available Microsoft is aware of Daylight Savings Time related changes in Iran. After returning to the standard time on September 22, 2022, the Iran Government elected to remain permanently in the standard time, cancelling daylight saving time. Hence, Iran will permanently remain at UTC + 3:30 time zone going forward. The required Daylight Savings Time changes are available in the April 2023 optional non-security preview updates, which were released on April 25, 2023 for some versions of Windows. All other supported versions of Windows will receive the needed Daylight Savings Time changes in updates released on May 9, 2023. If you are still having issues with your device not showing the correct time or date after installing appropriate updates, please verify you are on the latest update available for a supported version of Windows. This can be done by Checking for updates. If you are on the latest update for a supported version of Windows and are still experiencing issues related to Daylight Savings Time changes, please use Feedback Hub to file a report. See Send feedback to Microsoft with the Feedback Hub app for instructions. For more information about this Daylight Savings Time change, please see Iran 2023 time zone update now available. | 2023-05-05 08:00 PT |
| Windows LAPS with Azure AD and Microsoft Intune support is now in public preview See what’s new with the Windows Local Administrator Password Solution (LAPS) and how it can help keep your business secure. As of the April 11, 2023 security update, LAPS is now natively integrated into Windows. We’re now extending the solution to the cloud with Windows LAPS management in Microsoft Intune and - now in public preview - support for Azure Active Directory (Azure AD). Some of the new features include rich policy management, automatic rotation, dedicated event logs, a new PowerShell module, hybrid join support, and more. For more details and guidance for cloud and on-premises environments, read the following announcements: | 2023-05-04 10:00 PT |
| New feature: Sign up for Windows known issue email alerts A new email alert feature can notify you about Windows known issues documented in the Windows release health section within the Microsoft 365 admin center. It’s available to you if you’re a Windows or Microsoft 365 tenant with access to the Microsoft 365 Windows release health page and an eligible admin role. You can sign up to receive information about new issues disclosures, changes in issue status, new workarounds, and issue resolution information right in your inbox. Find guidance and an inside look in the embedded video in New feature: Sign up for Windows known issue email alerts. | 2023-05-03 10:00 PT |
| April skilling snacks: Bite-sized learning for IT pros Our special learning series continues to build a wider topics library for IT pros for continued professional development. These weekly selections of already existing, public resources are packaged in a way that is easy to consume in under two hours. It’s meant for all skill levels: those who are new to IT and seasoned vets looking for refresher or mentoring materials. Take advantage of the following topics published in the month of April:
Bookmark the series library post to catch up on the topics that are of most interest to you and at a time that’s most convenient for you: Windows skilling snacks: bite-sized learning for IT pros. | 2023-04-28 15:00 PT |
| Egypt 2023 time zone update available in the April 2023 monthly quality update Microsoft is aware that Daylight Savings Time related changes in the Arab Republic of Egypt will resume on the last Friday of April. The April 2023 monthly quality update for all supported version of Windows includes the following time zone update for Egypt:
The April 2023 monthly quality update was released on April 11, 2023 and can be installed today. Updates will need to be installed in advance of Daylight Savings Time related changes in the Arab Republic of Egypt, which begin April 28. If you are still having issues with your device not showing the correct time or date after installing the April 2023 updates for Windows, please verify you are on the latest update available for a supported version of Windows by Checking for updates. If you are on the latest update for a supported version of Windows and are still experiencing issues related to Daylight Savings Time changes, please use Feedback Hub to file a report. See Send feedback to Microsoft with the Feedback Hub app for instructions. For more information about this Daylight Savings Time change, please see Egypt 2023 time zone update now available. | 2023-04-27 14:30 PT |
| Windows client roadmap update See two lifecycle updates published on the Windows IT Pro Blog with respect to Windows 10 and Windows 11. Windows 10, version 22H2 will be the final version of Windows 10 released. It will receive monthly security update releases until October 14, 2025. That is the official end of support date for Windows 10. The Long-Term Servicing Channel (LTSC) will be available for Windows 11 Enterprise and Windows 11 IoT Enterprise in the second half of 2024. We recommend you begin transitioning to Windows 11 if you haven’t already. Read Windows client roadmap update for additional details and resources. | 2023-04-27 10:00 PT |
| Removal of Microsoft Store for Business tab from Microsoft Store app on Windows 10 and Windows 11 PCs Beginning mid-May, we will begin gradually rolling out the removal of the Microsoft Store for Business tab from the Microsoft Store app on Windows 10 and Windows 11 PCs. You will no longer be able to see line-of-business products listed in the Microsoft Store for Business tab in Microsoft Store when this change is implemented. The Microsoft Store for Business tab will continue to be available on HoloLens devices. Note: The retirement of Microsoft Store for Business and Education on Windows 11 was announced in 2021 It is recommended to add your apps through the new Microsoft Store app experience in Intune. If an app is not available in the Microsoft Store, you will need to retrieve an app package from the vendor and install it as a line-of-business (LOB) app or Win32 app. For instructions read the following articles:
Stay tuned to the Intune Customer Success blog as we will be publishing more information about this soon. | 2023-04-26 10:00 PT |
| The April 2023 Windows non-security preview update is now available The April 2023 non-security preview update is now available. These optional non-security previews are released for Windows 10, version 22H2 and Windows 11, versions 21H2 and 22H2 only. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases. NOTE Starting in April 2023, optional, non-security preview updates will be released on the fourth week of the month. Highlights for the Windows 11, version 22H2 update:
| 2023-04-25 10:00 PT |
| Get Windows updates as soon as they're available for your device For devices running Windows 11, version 22H2 or later, you can now choose to get the latest non-security updates, fixes, improvements, and enhancements via several servicing technologies—including controlled feature rollout (CFR), as soon as they become available for your device. To enable this feature, select Start > Settings > Windows Update and toggle the Get the latest updates as soon as they're available option to On. This allows your device to automatically download and install the latest non-security and feature updates as soon as they become available for your device (now and in the future). The toggle does not affect recommended security updates, which will still be installed as usual. After installation, you can view update details by going to Start > Settings > Windows Update > Update history. For managed devices, the toggle is disabled by default. For more information, see Get Windows updates as soon as they're available for your device. | 2023-04-25 10:00 PT |
| Changes to the deployment phase for CVE-2022-37967 - now beginning June 13, 2023 Security hardening changes needed on domain controllers in IT environments to address CVE-2022-37967 will enter the Third deployment phase, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 on June 13, 2023. Previous announcements had listed this change as taking place in April, however, that date has changed. At this time, it's still possible to bypass security hardening requirements using the guidance provided in KB5020805. However, beginning with the June 13, 2023 updates, the ability to bypass hardening measures will be reduced. To help protect your environment and prevent outages, we recommend that you update your Windows domain controllers with a Windows update released on or after November 8, 2022, move your Windows domain controllers to Audit mode by using the Registry Key setting, and enable enforcement mode as soon as possible. Additional deployment phases in July 2023 and October 2023 will raise the default minimum for the security hardening changes for CVE-2022-37967, and environments must be compliant before installing updates for each phase onto your domain controller. It is recommended to move to enforcement mode as soon as possible. For complete guidance, see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967. | 2023-04-13 10:00 PT |
| By popular demand: Windows LAPS available now See what’s new with Local Administrator Password Solution (LAPS) and how it can help keep your business secure. LAPS is used to manage the password of a specified local administrator account by regularly rotating the password and backing it up to Active Directory (AD). Starting with the April 11, 2023 security update, LAPS is natively integrated into Windows with new capabilities for on-premises AD scenarios and forthcoming Azure Active Directory benefits (currently in private preview). Some of the new features include rich policy management, automatic rotation, dedicated event log, new PowerShell module, hybrid-joined support, and more. For more details and guidance for cloud and on-premises environments, read By popular demand: Windows LAPS available now! | 2023-04-12 10:00 PT |
| Windows Update for Business reports: access and region control Preview the more flexible data routing and access controls, as well as new regions for data storage with Windows Update for Business reports. A new blog article reviews what data routing and access control are, what’s required for them with your regular Azure tools, and how the new solution automates and simplifies your update compliance monitoring. Specifically, this solution is helpful to report on or control access to a subset of tenant devices. Find guidance and follow 7 easy steps to route the tenant’s primary workspace into separate secured workspaces for each access control scope:
| 2023-04-12 10:00 PT |
| Improvements for Windows Server 2022: Enabling the playback feature Beginning April 11, 2023, the playback feature will be available for Windows Server 2022 in a phased manner. This feature will help reduce network bandwidth usage by making update sizes smaller through more efficient packaging and removal of reverse differentials from the cumulative update package. The articles below will help you understand the concepts of forward and reverse differentials in the Windows cumulative update. They will also explain how we leveraged differentials to reduce the update sizes for Windows 11.
By default, the feature will be shipped as disabled during phase 1. See KB5026322—Improvements for Windows Server 2022: Enabling the playback feature for steps on enabling this feature. | 2023-04-12 10:00 PT |
| Take action: April 2023 security update available for all supported versions of Windows The April 2023 security update release is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases. NOTE Starting in April 2023, optional, non-security preview updates will release on the fourth Tuesday of the month. Highlights for the Windows 11 update:
Short on time? Watch our short Windows 11 update release notes video for this month's tips. | 2023-04-11 10:00 PT |
| Reminder: End of servicing for Windows 10 version 21H2 (Editions: Home, Pro, Pro Education and Pro for Workstations) On June 13, 2023, Home, Pro, Pro Education and Pro for Workstations editions of Windows 10, version 21H2 will reach end of servicing. The upcoming June 2023 security update, to be released on June 13, 2023, will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats. To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update. As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For detailed information, see the entry for Windows 10, version 21H2 end of servicing (Home & Pro) at the learn.microsoft.com lifecycle page. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool. | 2023-04-06 10:00 PT |
| Take action: Review Windows Autopatch Tenant Management for potential action required to prevent inactive status Beginning May 2023, Windows Autopatch is improving the existing Tenant management experience within our portal. The Tenant management blade is used to alert IT admins of any actions that are required to maintain overall service health. We are introducing the ability to alert you on:
We are also introducing the ability to mark the Windows Autopatch section of your tenant as “inactive” if there are any actions that need to be taken. To know if action is required, visit the Tenant management section and select the banner displayed within the Windows Autopatch Devices blade that alerts you to take action. If you have no actions that need to be taken, there is no effect on your tenant. However, if the service has identified actions for you to take, you must act to avoid interruption with the Windows Autopatch service. Learn more about Windows Autopatch tenant actions. If you'd like to discover Windows Autopatch, see our overview at What is Windows Autopatch. | 2023-04-03 15:00 PT |
| New Features in Windows Autopatch Public Preview To provide IT admins the ability to customize Windows feature and quality updates in line with existing organizational structures and business goals, Windows Autopatch is releasing a new feature set to meet customers where they are at in their update management journey. The new release has now entered public preview. Beginning May 1, Windows Autopatch gives you the choice to leverage new capabilities including:
If you’re ready to start testing it out, you can choose to opt-in by enabling Windows Autopatch Groups and the bundled feature set in your tenant. Start at the Microsoft Intune admin center and navigate to the Autopatch Groups (preview) tab from the Release Management options. If you're not using Windows Intune, learn more today at Learn about using Windows Update for Business in Microsoft Intune. | 2023-04-03 15:00 PT |
| March skilling snacks: Bite-sized learning for IT pros Our special learning series continues to build a wider topics library for the continued professional development of IT pros. These weekly selections of public resources are packaged in a way that is easy to consume in under two hours. Topics are meant for all skill levels: those who are new to IT, and seasoned vets looking for refresher or mentoring materials. This month, review Windows Autopilot, cloud virtualization spaces, application compatibility, and Windows monthly updates. Take advantage of the following topics published in the month of March: | 2023-03-30 15:00 PT |
| March 2023 Windows non-security preview update available for all supported versions of Windows The March 2023 non-security preview update is now available for all supported versions of Windows. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate. IMPORTANT After March 2023, there are no more optional, non-security preview releases for the supported editions of Windows 10, version 20H2 and Windows 10, version 21H2. Only cumulative monthly security updates (known as the "B" or Update Tuesday release) will continue for these versions. Windows 10, version 22H2 will continue to receive security and optional releases. NOTE Starting in April 2023, optional, non-security preview updates will release on the fourth Tuesday of the month. Highlights for the Windows 11, version 22H2 update:
| 2023-03-28 10:00 PT |
| Reminder: The Third deployment phase for CVE-2022-37967 starts with updates released April 11, 2023 Security hardening changes needed on Domain Controllers in IT environments to address CVE-2022-37967 will enter the Third deployment phase with the release of updates on April 11, 2023, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967. Each phase raises the default minimum for the security hardening changes for CVE-2022-37967 and your environment must be compliant before installing updates for each phase onto your Domain Controller. If you are using the workaround to disable PAC signature addition by setting the KrbtgtFullPacSignature subkey to a value of 0, you will no longer be able to use this workaround after installing updates released April 11, 2023. Your apps and environment will need to at least be compliant with KrbtgtFullPacSignature subkey to a value of 1 to install these updates on your Domain Controllers. If you are not using any workaround for issues related to CVE-2022-37967 security hardening, you might still need to address issues in your environment for the coming phases; July 11, 2023 - Initial enforcement phase and October 10, 2023 - Full enforcement phases. Important: It is recommended to move to enforcement mode as soon as possible, to enable all parts of the security hardening in your environment. For more information, please see KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967 | 2023-03-27 11:00 PT |
| Windows app confidence advice for inventory, testing, and deployment health needs A new Windows IT Pro Blog series offers the best application compatibility advice. This introductory article provides a behind-the-scenes look at how Microsoft maintains 99.7% compatibility rates with additional support available for the remaining 0.3%. It also outlines the following three posts that guide IT pros through app inventory, testing, and deployment health.
| 2023-03-27 11:00 PT |