Blog Post

Windows IT Pro Blog
6 MIN READ

An IT pro’s guide to Windows 11, version 26H2

AriaUpdated's avatar
AriaUpdated
Icon for Microsoft rankMicrosoft
Sep 29, 2026

Windows 11, version 26H2 is now generally available, delivering the next annual feature update for Windows 11. Built on the same servicing foundation as Windows 11, versions 25H2 or 24H2, version 26H2 continues Microsoft focus on providing a predictable, low-disruption update experience for organizations while delivering the latest Windows innovations, security improvements, and management enhancements.

Windows 11, version 26H2 is delivered as an enablement package for eligible devices running Windows 11, versions 25H2 or 24H2. This means you can move to the latest release with minimal deployment overhead and a streamlined installation experience.

What is Windows 11, version 26H2?

Windows 11, version 26H2 is the latest annual feature update for Windows 11 and continues Microsoft annual release cadence for commercial customers.

Like version 25H2, version 26H2 shares the same servicing branch and underlying code base as previous releases. New features and capabilities have been delivered to supported devices through monthly cumulative updates, with some functionality remaining dormant until activated by the version 26H2 enablement package. This approach reduces disruption while simplifying validation and deployment planning.

Why an enablement package?

Traditional Windows feature updates often required a full operating system upgrade. For eligible devices running Windows 11, versions 25H2 or 24H2, version 26H2 is activated through a lightweight enablement package.

An enablement package:

  • Activates features already present on the device.

  • Installs similarly to a monthly quality update.

  • Requires a small download.

  • Typically results in faster installation times.

  • Allows your organization to use existing servicing and deployment processes.

Because versions 26H2, 25H2, and 24H2 share a common servicing branch, many organizations might find that validating version 26H2 requires less effort than a traditional feature update.

What's new in Windows 11, version 26H2

Windows 11, version 26H2 bundles features and enhancements gradually rolled out over the last year to versions 25H2 and 24H2 in the areas of security, management, accessibility, and productivity.

Security improvements

Windows continues to build on Microsoft commitment to security by default and security by design.

  • Administrator protection provides just-in-time administrative privileges and profile separation to help harden Windows against elevation-of-privilege attacks. You can enable it through Microsoft Intune or Group Policy.

  • Built-in Sysmon functionality in Windows enables you to capture system events that security tools can use for threat detection. Sysmon is off by default. You can configure it to capture the events your organization needs.

  • Smart App Control can now be turned on or off without requiring a clean installation of Windows, making it easier to block untrusted or potentially harmful apps.

  • Windows Hello Enhanced Sign-in Security expands support to compatible peripheral fingerprint sensors. As such, enhanced biometric sign-in protection is available on more Windows 11 PCs.

  • Post-quantum cryptography improvements include API support for NIST-standardized ML-KEM and ML-DSA algorithms. They include support for key exchange, signing, and decryption through CNG and .NET.

  • Driver security enhancements change how the Windows kernel trusts third-party drivers. They remove default trust for cross-signed drivers while maintaining support for WHCP and designated trusted legacy drivers.

Management and deployment enhancements

Windows 11, version 26H2 introduces improvements designed to help IT administrators deploy, manage, and secure devices at scale.

  • Windows Autopilot device preparation supports device association. It helps organizations identify trusted devices before enrollment and enabling device-targeted policies, automatic corporate device enrollment, and additional OOBE customization.

  • Windows settings backup and restore expands first sign-in restore to Microsoft Entra hybrid joined devices, Cloud PCs, and multi-user environments. Use it to restore user settings and Microsoft Store apps during device refreshes, upgrades, and migrations.

  • Point-in-time restore for Windows provides another recovery option. Roll back a PC, including apps, settings, and personal files, to a recent automatic restore point.

  • Policy-based app removal gives organizations more flexibility to remove preinstalled Microsoft apps on Enterprise and Education devices. Just specify additional MSIX and APPX packages through Group Policy.

  • RSAT on Arm64 enables IT administrators to use tools including Server Manager, Group Policy Management Tools, DNS Server Tools, DHCP Server Tools, and Active Directory management tools on Windows 11 Arm64 devices.

  • App update orchestration allows participating applications to coordinate updates with Windows Update for improved scheduling and a more streamlined update experience

User experience and accessibility enhancements

Windows 11, version 26H2 continues to improve everyday productivity with enhancements across Windows experiences.

  • File Explorer adds productivity enhancements including AI actions for working with supported images and summarizing OneDrive and SharePoint documents. Also included are quick actions for work and school accounts, support for additional archive formats, and performance improvements.

  • Windows Search makes results easier to find and understand with previews. It better handles typos and partial app names, identifies result types clearer, and automatically indexes frequently used folders.

  • Start and taskbar enhancements provide additional ways to customize the Windows workspace. Begin with new Start menu views and sizing options, additional taskbar positions, and a smaller taskbar option.

  • Task Manager provides greater visibility into NPU usage, including NPU utilization and memory information. You can also identify applications running in an AppContainer.

  • Magnifier adds clearer screen reader announcements, more precise zoom controls, and screen tint options to improve readability.

  • Narrator adds Braille Viewer, improves reading and navigation in Microsoft Word, and provides more control over how information about on-screen controls is announced.

  • Voice access adds natural language commanding on supported Copilot+ PCs, additional language support, and Voice Isolation to help improve recognition in environments with other speakers or background noise.

Now enabled by default

Some features that were behind temporary commercial control in Windows 11, version 25H2 are now enabled by default in version 26H2. These include:

  • Windows settings backup, which helps preserve supported Windows settings and Microsoft Store app lists for recovery and device replacement scenarios. Existing administrator-configured policies are still honored.

  • App-specific taskbar actions that help users access common actions directly from taskbar experiences.

  • File Explorer improvements focused on improving navigation and usability within File Explorer.

Some of these features have eligibility requirements. Please see related technical documentation for more details.

For a closer look at new features and enhancements added to Windows 11 since version 25H2, please see What's new in Windows 11, version 26H2.

Servicing and support lifecycle

Windows 11, version 26H2 continues Microsoft annual Windows feature update cadence. Installing Windows 11, version 26H2 resets the support lifecycle for supported editions, as noted here:

Edition

Support duration

Home

24 months

Pro

24 months

Enterprise

36 months

Education

36 months

Deployment considerations

For devices currently running Windows 11, version 25H2 or version 24H2, you can use existing deployment frameworks and update rings to validate and deploy version 26H2.

As with any release, we recommend that you:

  • Validate version 26H2 in pilot environments.

  • Test business-critical applications, representative hardware, and workflows.

  • Expand deployment through existing update rings.

  • Monitor deployment health and known issues.

It is also a good time to review security and compliance requirements and educate support personnel on any new functionality.

Because this release uses servicing technology like that used for monthly cumulative updates, many organizations should experience a streamlined deployment process.

Tools and resources

Deployment, security, and management tools have been refreshed for this update. These include:

We've also updated key references and documentation:

Monthly release notes for Windows 11, version 26H2 will be added to the update history page beginning with the first monthly security update for version 26H2, slated for October 13, 2026.

And, if you're looking for an easy way to keep up on what's new in the world of Windows management, tune in to my new podcast, Ctrl + Manage. The first episode debuts this Thursday, October 1, here on the Tech Community. Click here to save the date and tune in live.

Start planning for Windows 11, version 26H2

Windows 11, version 26H2 is designed to make moving to the latest version of Windows familiar and straightforward. If you're managing eligible devices on Windows 11, version 25H2 or 24H2, start by validating the update with a targeted set of devices, applications, and workflows. Then expand your deployment using the tools and processes you already have in place.

As always, we want to hear from you. Drop a comment below and let us know what's working, what questions you have, and what we can do to make managing Windows easier for your organization.


Continue the conversation. Find best practices. Join the Windows Tech Community.

For updates on new releases, tools, and resources, bookmark the Windows IT Pro Blog and follow @WindowsUpdate on X. For the latest on how Windows is evolving for organizations and the people who support them, follow Windows at Work on LinkedIn.

Updated Oct 19, 2026
Version 2.0

13 Comments

  • skatufa's avatar
    skatufa
    Copper Contributor

    Great overview from the team! Since Windows 11 26H2 is now live across both Intune Feature Update policies and Windows Autopatch, I’ve put together a step-by-step walkthrough covering update ring deferral settings (0 days to avoid policy conflicts), feature update profile creation, and phased pilot ring assignments:

    https://techeuc.com/upgrade-to-windows-11-26h2-using-intune/

    Hope this helps anyone planning their 26H2 rollout!

  • Dean_Gross's avatar
    Dean_Gross
    Silver Contributor

    when will 25H2 and 6H2 show up as version options in the windows version filter on the Devices page in Defender?

  • 26H2 seems exactly the same apart from the fact it's got rid of the co-pilot side window in Edge. So I have to use the web version. But that co-pilot is unable to access any of the webpages I'm viewing.  Why did it have to change Edge as well??  So this is a huge detraction, so I reversed the install. 

  • AriaUpdated​ some feedback and questions. Congrats to a very smooth enablement package. It was pretty fast.

    I'd like to see::

    • Security: specific settings of Defender Security and Edge (which are mutual) - enabled by default - for consumers.
    • Security / OS footprint: preprevisioned Microsoft W11 apps that are deprecated and no longer in developments and updated removed and not reprovisioned in a new user profile or new or reset computer. Both consumers and business facing this. From leftover Windows 10 apps till M365 companion apps that will be retired in Dec, but not removed.*
    • Security: I am interested into hearing Microsoft's point of view on the situation that game studios causing a lot of headache on computers
      One important item are "anti-cheat" slop preventing VBS / HVCI at scale, refer: https://lnkd.in/p/evUbCxAw
    • Usability / Data protection: sprawl of "save files and settings for games and apps in Documents, Local and Roaming Appdata and even elsewhere - the idea of "Saved Games" is not followed by anyone anymore, including Microsoft Games. If Microsoft could find a soluition like making this folder mandantory or redirect. Follwed by integration into OneDrive KFM and new Windows Backup.
    • OS Footprint: removing FoD that are deprecated / no longer in development*
    • Updates: Updating Windows Update Catalog webpage design to MSFT current design language.
    • Updates: Hybrid updates on Windows update Catalog, ability to download MSU, that are stubs then make use of incremental update sideloading + SSU - instead of the full package downloads.  LCUs now exceed 4GB per month for manual downloads.

      *eventually checking if user ever launched these.

    Question:
    Is there a "What's new in 26H2" seperated by consumers and IT Pros, as in previous releases or is it combined now?

  • procomptor's avatar
    procomptor
    Copper Contributor

    Finally after months of dealing with Windows 11 freezing after startup unless I force activity through a USB connection it is working properly. I have Corsair iCUE and Gigabyte GCC running on an AMD Ryzen 9 5900x with Gigabyte RTX 4090 GPU. 

    My fear is will this update cause problems with "what some call" older legacy drivers. The iCUE software is a real pain to reload and then reconfigure.

     

    Thanks for ant advice as have recently retired my Pro shop

     

  • JosephLusoma's avatar
    JosephLusoma
    Copper Contributor

    Update from 25H2 TO 26H2 was very fast. I had to double check again.
    Amazing work. Microsoft.

  • BlackV's avatar
    BlackV
    Brass Contributor

    File Explorer adds productivity enhancements including AI actions for working with supported images and summarizing OneDrive and SharePoint documents.

    No one is asking for this, we dont want it in paint or notepad while you're there

     

    Otherwise autopilot and ADP improvements are always welcome, when will autopatch and volume licensing be available

     

  • lalanc01's avatar
    lalanc01
    Iron Contributor

    AriaUpdated​ if we don't have any Windows backup policy, does that mean that new devices provisioned with OSD will auto prompt to recover settings from backup?

    Also, does it mean that Windows backup will have a scheduled backup on new and upgraded to 26h2 devices?

    Thks for clarifying that part.

    • Miranda_Leschke's avatar
      Miranda_Leschke
      Icon for Microsoft rankMicrosoft

      Thanks for the question! No, new devices provisioned with OSD won’t automatically prompt users to restore settings unless IT has enabled the restore policy. Backup and restore are configured separately. Starting with 26H2, backup is enabled by default for eligible devices when no admin-configured backup policy is set, but restore is still controlled by IT.

      Backup runs automatically on an 8-day schedule. The 26H2 default-on backup change applies to new installs/newly set up devices, not in-place upgrades.

    • AriaUpdated's avatar
      AriaUpdated
      Icon for Microsoft rankMicrosoft

      It should be there now, if you don't see it still - please let me know! :) 

      • hoyty76's avatar
        hoyty76
        Steel Contributor

        Thanks, it is there today.