Windows 11, version 26H2 is now generally available, delivering the next annual feature update for Windows 11. Built on the same servicing foundation as Windows 11, versions 25H2 or 24H2, version 26H2 continues Microsoft focus on providing a predictable, low-disruption update experience for organizations while delivering the latest Windows innovations, security improvements, and management enhancements.
Windows 11, version 26H2 is delivered as an enablement package for eligible devices running Windows 11, versions 25H2 or 24H2. This means you can move to the latest release with minimal deployment overhead and a streamlined installation experience.
What is Windows 11, version 26H2?
Windows 11, version 26H2 is the latest annual feature update for Windows 11 and continues Microsoft annual release cadence for commercial customers.
Like version 25H2, version 26H2 shares the same servicing branch and underlying code base as previous releases. New features and capabilities have been delivered to supported devices through monthly cumulative updates, with some functionality remaining dormant until activated by the version 26H2 enablement package. This approach reduces disruption while simplifying validation and deployment planning.
Why an enablement package?
Traditional Windows feature updates often required a full operating system upgrade. For eligible devices running Windows 11, versions 25H2 or 24H2, version 26H2 is activated through a lightweight enablement package.
An enablement package:
-
Activates features already present on the device.
-
Installs similarly to a monthly quality update.
-
Requires a small download.
-
Typically results in faster installation times.
- Allows your organization to use existing servicing and deployment processes.
Because versions 26H2, 25H2, and 24H2 share a common servicing branch, many organizations might find that validating version 26H2 requires less effort than a traditional feature update.
What's new in Windows 11, version 26H2
Windows 11, version 26H2 bundles features and enhancements gradually rolled out over the last year to versions 25H2 and 24H2 in the areas of security, management, accessibility, and productivity.
Security improvements
Windows continues to build on Microsoft commitment to security by default and security by design.
-
Administrator protection provides just-in-time administrative privileges and profile separation to help harden Windows against elevation-of-privilege attacks. You can enable it through Microsoft Intune or Group Policy.
-
Built-in Sysmon functionality in Windows enables you to capture system events that security tools can use for threat detection. Sysmon is off by default. You can configure it to capture the events your organization needs.
-
Smart App Control can now be turned on or off without requiring a clean installation of Windows, making it easier to block untrusted or potentially harmful apps.
-
Windows Hello Enhanced Sign-in Security expands support to compatible peripheral fingerprint sensors. As such, enhanced biometric sign-in protection is available on more Windows 11 PCs.
-
Post-quantum cryptography improvements include API support for NIST-standardized ML-KEM and ML-DSA algorithms. They include support for key exchange, signing, and decryption through CNG and .NET.
-
Driver security enhancements change how the Windows kernel trusts third-party drivers. They remove default trust for cross-signed drivers while maintaining support for WHCP and designated trusted legacy drivers.
Management and deployment enhancements
Windows 11, version 26H2 introduces improvements designed to help IT administrators deploy, manage, and secure devices at scale.
-
Windows Autopilot device preparation supports device association. It helps organizations identify trusted devices before enrollment and enabling device-targeted policies, automatic corporate device enrollment, and additional OOBE customization.
-
Windows settings backup and restore expands first sign-in restore to Microsoft Entra hybrid joined devices, Cloud PCs, and multi-user environments. Use it to restore user settings and Microsoft Store apps during device refreshes, upgrades, and migrations.
-
Point-in-time restore for Windows provides another recovery option. Roll back a PC, including apps, settings, and personal files, to a recent automatic restore point.
-
Policy-based app removal gives organizations more flexibility to remove preinstalled Microsoft apps on Enterprise and Education devices. Just specify additional MSIX and APPX packages through Group Policy.
-
RSAT on Arm64 enables IT administrators to use tools including Server Manager, Group Policy Management Tools, DNS Server Tools, DHCP Server Tools, and Active Directory management tools on Windows 11 Arm64 devices.
-
App update orchestration allows participating applications to coordinate updates with Windows Update for improved scheduling and a more streamlined update experience
User experience and accessibility enhancements
Windows 11, version 26H2 continues to improve everyday productivity with enhancements across Windows experiences.
-
File Explorer adds productivity enhancements including AI actions for working with supported images and summarizing OneDrive and SharePoint documents. Also included are quick actions for work and school accounts, support for additional archive formats, and performance improvements.
-
Windows Search makes results easier to find and understand with previews. It better handles typos and partial app names, identifies result types clearer, and automatically indexes frequently used folders.
-
Start and taskbar enhancements provide additional ways to customize the Windows workspace. Begin with new Start menu views and sizing options, additional taskbar positions, and a smaller taskbar option.
-
Task Manager provides greater visibility into NPU usage, including NPU utilization and memory information. You can also identify applications running in an AppContainer.
-
Magnifier adds clearer screen reader announcements, more precise zoom controls, and screen tint options to improve readability.
-
Narrator adds Braille Viewer, improves reading and navigation in Microsoft Word, and provides more control over how information about on-screen controls is announced.
-
Voice access adds natural language commanding on supported Copilot+ PCs, additional language support, and Voice Isolation to help improve recognition in environments with other speakers or background noise.
Now enabled by default
Some features that were behind temporary commercial control in Windows 11, version 25H2 are now enabled by default in version 26H2. These include:
-
Windows settings backup, which helps preserve supported Windows settings and Microsoft Store app lists for recovery and device replacement scenarios. Existing administrator-configured policies are still honored.
-
App-specific taskbar actions that help users access common actions directly from taskbar experiences.
-
File Explorer improvements focused on improving navigation and usability within File Explorer.
Some of these features have eligibility requirements. Please see related technical documentation for more details.
For a closer look at new features and enhancements added to Windows 11 since version 25H2, please see What's new in Windows 11, version 26H2.
Servicing and support lifecycle
Windows 11, version 26H2 continues Microsoft annual Windows feature update cadence. Installing Windows 11, version 26H2 resets the support lifecycle for supported editions, as noted here:
|
Edition |
Support duration |
|
Home |
24 months |
|
Pro |
24 months |
|
Enterprise |
36 months |
|
Education |
36 months |
Deployment considerations
For devices currently running Windows 11, version 25H2 or version 24H2, you can use existing deployment frameworks and update rings to validate and deploy version 26H2.
As with any release, we recommend that you:
-
Validate version 26H2 in pilot environments.
-
Test business-critical applications, representative hardware, and workflows.
-
Expand deployment through existing update rings.
-
Monitor deployment health and known issues.
It is also a good time to review security and compliance requirements and educate support personnel on any new functionality.
Because this release uses servicing technology like that used for monthly cumulative updates, many organizations should experience a streamlined deployment process.
Tools and resources
Deployment, security, and management tools have been refreshed for this update. These include:
-
Administrative templates (ADMX) for Windows 11, version 26H2
-
Group Policy Settings Reference for Windows 11, version 26H2
We've also updated key references and documentation:
-
Windows release health (for known and resolved issues)
-
Windows 11 release information (for the release history and hotpatch calendar)
Monthly release notes for Windows 11, version 26H2 will be added to the update history page beginning with the first monthly security update for version 26H2, slated for October 13, 2026.
And, if you're looking for an easy way to keep up on what's new in the world of Windows management, tune in to my new podcast, Ctrl + Manage. The first episode debuts this Thursday, October 1, here on the Tech Community. Click here to save the date and tune in live.
Start planning for Windows 11, version 26H2
Windows 11, version 26H2 is designed to make moving to the latest version of Windows familiar and straightforward. If you're managing eligible devices on Windows 11, version 25H2 or 24H2, start by validating the update with a targeted set of devices, applications, and workflows. Then expand your deployment using the tools and processes you already have in place.
As always, we want to hear from you. Drop a comment below and let us know what's working, what questions you have, and what we can do to make managing Windows easier for your organization.
Continue the conversation. Find best practices. Bookmark the Windows Tech Community. Looking for support? Visit Windows on Microsoft Q&A.
Microsoft