What’s new for IT pros in Windows 10, version 20H2
Published Oct 20 2020 10:01 AM 406K Views
Microsoft

Windows 10, version 20H2 is now available through Windows Server Update Services (WSUS) and Windows Update for Business, and can be downloaded today from Visual Studio Subscriptions, the Software Download Center (via Update Assistant or the Media Creation Tool), and the Volume Licensing Service Center[1]. Today also marks the start of the 30-month servicing timeline for this Semi-Annual Channel release.

Just like we did for devices upgrading from Windows 10, version 1903 to version 1909, we will be delivering Windows 10, version 20H2 (also referred to as the Windows 10 October 2020 Update) to devices running Windows 10, version 2004 via the new streamlined fashion, which we call an enablement package. For those updating to Windows 10, version 20H2 from earlier versions of Windows, the process will be similar to previous updates.

For those of you that are new to “enablement packages,” Windows 10, version 2004 and Windows 10, version 20H2 share a common core operating system with an identical set of system files. As a result, the new features in version 20H2 were included in the monthly quality updates for version 2004 released on September 8, 2020, but were delivered in a disabled/dormant state. These features remain dormant until they are turned on with the Windows 10, version 20H2 enablement package: a small, quick to install “switch” that activates these features. Using an enablement package, the update to Windows 10, version 20H2 should take approximately the same amount of time as it does to install monthly quality updates.

Note: If you are running Windows 10, version 2004 and have not installed the September 8, 2020 updates, you will not see the version 20H2 enablement package offered to your device.

With today's release, we recommend IT administrators begin targeted deployments of Windows 10, version 20H2 to validate that the apps, devices, and infrastructure used by their organizations work as expected with the new features. If you will be updating devices used in remote or hybrid work scenarios, I also recommend reading Deploying a new version of Windows 10 in a remote world. For insight into our broader rollout strategy, see John Cable's post on How to get the Windows 10 October 2020 Update.

If your organization is currently running Enterprise or Education editions of Windows 10, version 2004, you have 18 months of servicing. By using the enablement package to upgrade your devices to version 20H2, you will receive 30 months of servicing. Devices running Home, Pro, Pro for Workstations, and Pro Education will receive the standard 18 months of servicing. For more information, see the Windows lifecycle FAQ.

New features

As you begin to roll out Windows 10, version 20H2 to your organization, here are some of the new features and enhancements that will allow you to benefit from intelligent security, simplified updates, flexible management, and enhanced productivity.

For the end user

  • Theme-aware tiles in Start – The redesigned Start menu has a more streamlined design that removes the solid color backplates behind the logos in the apps list, and applies a uniform, partially transparent background to the tiles. This design creates a beautiful stage for your icons, especially the Fluent Design icons for Office and Microsoft Edge, as well as the redesigned icons for built-in apps like Calculator, Mail, and Calendar.
  • ALT+TAB between tabs in Microsoft Edge – We introduced ALT+TAB (task switcher) allowing you to toggle between open windows way back in Windows 2.0! In Windows 10, version 20H2, you can now use ALT+TAB to rotate between not only your open apps but also the tabs in Microsoft Edge. Now rotating through ALT+TAB will allow you to open Microsoft Edge in the specific tab you're needing, not just the latest active tab. You can modify the ALT+TAB experience in Settings > System > Multitask.
  • Improved notifications – Toast notifications now have the app's logo in the top left corner of the notification, so you can immediately see where the notification is coming from. We've also turned off the Focus Assist notifications, which tells you when Focus Assist is enabled – whether via automatic rule or manually enabling it.
  • Settings – We continue to improve the Settings page, adding more and more classic Control Panel capabilities. In addition to added settings, we also added a [COPY] button to Settings > System > About so you can easily copy that information and paste it into a help desk ticket. Watch for even more improvements to come!
  • Tablet experience – Previously, when you detach a keyboard on a 2-in-1 device, a toast notification would appear asking if you wanted to switch into Tablet Mode. If you tapped Yes, you would switch into Tablet Mode. But selecting No would bring you the Windows desktop. In Windows 10, version 20H2, the default is changed: the toast notification no longer appears and you are instead brought into the new tablet experience. You can change this behavior in Settings > System > Tablet.
  • Refresh rate of display – Change the refresh rate of your display, giving you a smoother motion. This change can be made at Settings > System > Display > Advanced display settings. Note that this may require supported hardware.
  • Microsoft Edge (built on Chromium) – And of course, Windows 10, version 20H2 is the first version of Windows to come with Microsoft Edge browser built on the Chromium engine.

To keep up the latest improvements for end users, follow the Windows Insider Program Blog.

For the IT professional

  • Mobile device management (MDM) – Like you've been doing with Group Policy for 20 years, you can now make granular changes to Local Users and Groups on an MDM-managed Windows 10 device by using the Local Users and Groups MDM policy.
  • Windows Autopilot – There have been many enhancements to Windows Autopilot since version 2004, including Windows Autopilot for HoloLens, Windows Autopilot and co-management, and enhancements to Autopilot reporting. For details on all of these and more, see Managing Windows Devices with Microsoft Endpoint Manager. Here's a summary of some of the enhancements:
    • Windows Autopilot for HoloLens – You know HoloLens as that untethered, holographic device. HoloLens 2 devices are commercial-ready, support Azure AD, MDM, kiosk mode, BitLocker, Windows Store for Business, and Windows Update for Business. As adoption increases, setting up your HoloLens 2 devices just got easier, with a Windows Autopilot for HoloLens 2 self-deploying mode.
    • Windows Autopilot with co-management – Co-management policy can be set during Autopilot deployment to ensure workloads are managed from the appropriate source.
    • Windows Autopilot ESP + task sequences – Using a task sequence as part of Windows Autopilot allows you to take advantage of your Configuration Manager investments and reuse those task sequences to configure devices. The task sequence can integrate right into the Enrollment Status Page (ESP), blocking access to the desktop until the task sequence completes.
    • Enhancements to Windows Autopilot deployment reporting – Currently in preview, you can monitor the status of Autopilot deployments in the Microsoft Endpoint Manager admin center: endpoint.microsoft.com. From there, select Devices > Monitor and scroll down to the Enrollment section. Click Autopilot deployment (preview). As this section grows, you will soon be able to see ESP duration broken down at a device and user targeted ESP and app installation status, policy status, and other enhancements. So stay tuned!
  • Microsoft Defender Application Guard for Office – Microsoft Defender Application Guard, designed for Windows 10, now supports Office! With this support, you can launch untrusted Office documents (those that come from outside the Enterprise) in an isolated container to prevent potentially malicious content from compromising the user's computer or exploiting their personal contents.
  • LCU + SSU = single payload – Many of you have asked us for many years to simplify the deployment of Latest Cumulative Updates (LCUs) and Servicing Stack Updates (SSUs). Starting with Windows 10, version 20H2, LCUs and SSUs have been combined into a single cumulative monthly update, available via Microsoft Catalog or Windows Server Update Services.
  • More secure biometric sign on – With enhanced sign-in security[2], Windows Hello now offers added support for virtualization-based security for certain fingerprint and face sensors, which protects, isolates, and secures a user's biometric authentication data.
  • Microsoft Edge on Chromium – Even more important for the IT pro, we're adding this feature here as well! Windows 10, version 20H2 is the first version of Windows to come with Microsoft Edge on Chromium. Need a reason why you should care? I'll give you five! I also invite you to learn more about the security features in Microsoft Edge.

What else have we been up to?

Aside from Windows 10, version 20H2, we've been busy with other new, exciting products and features that you may have heard about! Note that some of these may require additional licensing or services. Check out the links for details.

  • Cortana – We continue to make investments in Cortana, adding a daily briefing email from Cortana, play my emails from Outlook, Cortana availability within the Microsoft Teams mobile app (available in English today, more languages coming!), and of course the updated and improved features of Cortana in Windows 10 itself.
  • Universal Print – Universal Print provides cloud-managed print services built on Azure. Universal Print ensures that customers can print from anywhere, anytime, with secure identity credentials. And, it is integrated right into Microsoft Endpoint Manager making it easy to get started and join the thousands of Preview customers who have moved millions of print jobs to the cloud.
  • Windows Virtual Desktop – Windows Virtual Desktop is a desktop and app virtualization service that runs on Microsoft Azure. It lets end users connect securely to a full desktop from any device. And now with Microsoft Endpoint Manager, you can secure and manage your Windows Virtual Desktop VMs with policy and apps at scale, after they're enrolled.
  • Microsoft Tunnel Gateway – Microsoft Tunnel Gateway allows Microsoft Intune-enrolled iOS and Android devices to access on-premises apps and resources, with single sign-on Azure AD authentication, integrated Conditional Access policies, and is flexible enough to meet the needs of all organizations. (Questions about Microsoft Tunnel? Join our Microsoft Tunnel AMA  Thursday, October 22, 2020 - 8:00 a.m. to 9:00 a.m. Pacific Time.)
  • Endpoint analytics – Endpoint analytics aims to improve user productivity and reduce IT support costs by providing insights into the user experience. The insights enable IT to optimize the end-user experience with proactive support and to detect regressions to the user experience by assessing user impact of configuration changes. Enroll devices into Endpoint analytics while enabling tenant attach in Configuration Manager.
  • Productivity Score – Productivity Score provides visibility into how your organization works, helping you understand the employee experience, including how collaborative your people are. It also gives visibility into their technology experience, focusing on their endpoints, network connectivity, and Microsoft 365 apps.
  • Microsoft 365 apps – Office 365 ProPlus is the version of Microsoft Office that comes with several enterprise, government, and education subscription plans. Earlier this year we announced a name change to Microsoft 365 apps. If you have internal wikis, packages used by Configuration Manager – specifically any automatic deployment rules (ADRs), or product flows, you may need to update references to Office 365 ProPlus to this new name.
  • Microsoft Defender for Endpoint – Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) recently went through a name change as well – to Microsoft Defender for Endpoint. Explore the latest features or functionality and find information on the new name and the products affected in the Microsoft Defender for Endpoint blog.
  • Developers! Developers! Developers! – For information on what's new for developers, including Project Reunion and new PowerToys. see Windows Dev Center. (And if you don't know why I introduce this bullet in this way, check out any of the videos here!)
  • Test Base for Microsoft 365 – Test Base provides intelligent application testing from an Azure environment, making it easier for your ISVs (software vendors) to make support statements for a new version of Windows.

Frequently asked questions

Is there also a Windows Server release with this release?

Yes. The next Windows Server semi-annual channel (SAC) release is also available today. The Windows Server semi-annual channel is designed for customers who wish to take advantage of new operating system capabilities at a faster pace. Windows Server, version 20H2 is focused on reliability, performance, and other general improvements. It is also available on Azure Marketplace or the Volume Licensing Service Center.

Will there be a Long-Term Servicing Channel (LTSC) release with this release?

No. Windows 10 Enterprise LTSC 2019 is the current LTSC option, and was released with Windows 10, version 1809 in November 2018. The next LTSC release can be expected toward the end of 2021. Customers currently using Long-Term Servicing Branch (LTSB) 2015 for special-purpose devices should start working to upgrade those devices to Windows 10 Enterprise LTSC 2019, as mainstream support for LTSB 2015 ended on Oct. 13, 2020, and it entered into extended support. See the lifecycle policy here.

Can I upgrade our devices from Windows 7 directly to Windows 10, version 20H2?

Yes. You can directly upgrade from Windows 7 to Windows 10, version 20H2. We strongly encourage you to begin your upgrade process immediately as Windows 7 is no longer supported.

How can I preview versions of Windows 10 before they become available? I want to start testing these new features early so I can deploy them when they are released!

The Windows Insider Program for Business team has focused on enabling IT administrators to view and provide feedback on upcoming security, management, and productivity features ahead of release. And you can manage the installation of Windows 10 Insider Preview Builds across multiple devices in your organization! Read the Windows Insider Program for Business documentation for more information.

Where can I ask specific questions about rolling out Windows 10, version 20H2 and managing updates in general?

We hold monthly "office hours" in the Windows 10 servicing community on Tech Community with a broad group of servicing, deployment, endpoint management, and security experts. Submit your questions live during the one-hour event—or post them in advance by adding a label for "Office Hours"—and we'll do our best to help! Visit https://aka.ms/windows/officehours for more information and calendar links for upcoming events. Or click here to save the date for our November 19th session!

office-hours_11-19-2020.png

Tools and resources

To support the release of Windows 10, version 20H2, we have released updated versions of the following resources:


Also, if you haven't seen it yet, the Windows release health dashboard (introduced with the release of Windows 10, version 1903) provides you with timely information on the status of the Windows 10, version 20H2 rollout, details on any safeguard holds or known issues (including the status of those issues, workarounds, and resolutions), and other important announcements, such as those related to lifecycle updates, upcoming events, and best practices.

For help with configuring and deploying updates, please see the following resources:

To see a summary of the latest documentation updates, see What's new in Windows 10, version 20H2 IT pro content on Docs.

And finally, for a list of features and functionality that have been removed from Windows 10, or might be removed in future releases, see Features and functionality removed in Windows 10.

For the latest updates on new releases, tools, resources, AMAs, Ask the Experts, or Windows Office Hours, stay tuned to this blog and follow us @MSWindowsITPro on Twitter. You can also follow me on Twitter @LURIE_MSFT for the latest on Microsoft Endpoint Manager, Windows, and other exciting news and events for IT pros.


[1] It may take a day for downloads to be fully available in the VLSC across all products, markets, and languages.

[2] Enhanced sign-in security requires specialized hardware and software components that can be leveraged starting on devices shipping with Windows 10 October 2020 Update configured out of factory. Documentation will be available later this year.

56 Comments
Bronze Contributor

Thank you very much for information.

Very excited.

Autopilot for HoloLens is great.

 

Happy to see that it's publicly ready and available now!

Theme-aware tiles are my most favorite feature, after that are the security improvements that are in this new build.

Silver Contributor

You are calling it 20H2. So, are you dropping the usual versioning scheme and now naming it 2009 this time? You know that we will still call it 2009, do you? :D

Microsoft

Yes, @wroot we announced that back in June. I don't have the link, but we changed the naming taxonomy so it is officially known as either version 20H2 or the October 2020 update. Some are calling it 2009 (twenty-oh-nine) and some 2010 (twenty ten). But its officially 20H2 :grinning_face:

Silver Contributor

Strange. I follow the news pretty closely and i don't remember reading about an official change. Good to know.

Thanks a lot for the information @Joe Lurie

Thanks for Sharing with the Community @Joe Lurie :cool:

Awesome!

Thanks @Joe Lurie for this great overview!

Copper Contributor

Awesome news!

 

Does it support Hyper-V nested virtualization on AMD CPU?

https://techcommunity.microsoft.com/t5/virtualization/amd-nested-virtualization-support/ba-p/1434841

Microsoft
Microsoft

@DuredhelFinceleb Yes, version 20H2 supports AMD, and yes version 20H2 supports nested Hyper-V. And I *believe* AMD supports nested Hyper-V - this was unique to Intel for many years, but I think AMD added support earlier this year.

Bronze Contributor

@Joe Lurie Great stuff, great write up, lots of info. Thanks Joe! 

Copper Contributor

vonpelz_0-1603288488276.png

I think there's wrong information in the enablement package... Unless the update is only applicable for 1903.

 

Microsoft

Thanks, @vonpelz just saw a tweet saying the same thing. We are on it! I am passing this on to the right team! Thanks for noticing!

Silver Contributor

Just downloaded the new ISO and it is 5,73 GB compared to 4,90 GB for 2004. Whoah. 20H2 is supposed to be a small update for 2004. What is making all this size increase?

Microsoft

@wroot Its a small update if you download and install the enablement package. If you download the whole ISO you get the whole kit and caboodle (kitten kaboodle??).

Copper Contributor

Windows automatically installed the 20H2 update last night but now 16 Adobe apps say the are not compatible (anymore) so I can't update / use them ? When will this problem be resolved or is there a quick solution for the time being ?

Microsoft

@KrisVanlommel you can do a rollback if the apps are not working. Settings > Update & Security > Recovery > Go back to the previous version of Windows 10. However, if this incompatibility is known your device would not have updated (we have holds in place to prevent this). Once you roll back, see of there is an update to the Adobe apps.

Silver Contributor

Is 20H2 final or not? Here they are talking about Release Preview and Beta still https://blogs.windows.com/windows-insider/2020/10/22/announcing-windows-10-insider-preview-build-190...

Microsoft

@wroot yes the version 20H2 that was released on Tuesday is final. But our Insider Preview channel is still alive and well, deploying Preview bits to devices enrolled. 

Bronze Contributor

Check out the Flight Hub page if you are looking for details such as versions, build numbers, and dates.
https://docs.microsoft.com/en-us/windows-insider/flight-hub/

Silver Contributor

Is 19042.572 the exact build of a final version (what comes with ISO)?

Silver Contributor

Ok, i have installed it from the ISO and it is actually 19042.508, which was released in September.

Silver Contributor

Oh, LCU + SSU is probably the single most exciting feature in this update! :)

Copper Contributor

Is there any advice on Desktop Analytics targeting this version? When creating Deployment Plan I can only see 2004 and not 20H2

Microsoft

Hi @Anthony_D it typically takes 6-8 weeks for an OS to be available in Desktop Analytics. I’d expect that to be the case here as well.

Copper Contributor

Thanks @Joe Lurie for a very interesting and concise post!

Copper Contributor

So, this is nice and everything, but let's get to the bottom line: did you, in fact, fix the "broken" Credentials Manager that most seem to have problems with since the last update? You know the one, the problem where you have to log on over and over in everything from O365 to Outlook, to Edge, to Chrome, to Windows itself? The one where you click to save passwords and PINS, but that doesn't happen? Or, if in fact is does work, it's only for a day or so and then you have to do it all over again? Tell me THAT is fixed and then I will be impressed with these new bells and whistles.

Microsoft

Hi @LianneS I will DM you privately. 

Copper Contributor

Hi @Joe Lurie please DM me because we have also problems after this update (devices are getting disconnected from Azure AD)

Microsoft

@ddimov You don't have DM enabled on your profile so I can't. I likely will not be able to troubleshoot here. Please open a support case if you can't find anything online or in our Windows Release Health Dashboard: https://docs.microsoft.com/en-us/windows/release-information/status-windows-10-20h2

 

Brass Contributor

MS: "Starting with Windows 10, version 20H2, LCUs and SSUs have been combined into a single cumulative monthly update, available via Microsoft Catalog or Windows Server Update Services"
Why there is a new SSU for 20H2 (KB4586864) from 11-2020 in catalog and WSUS?

Microsoft
Copper Contributor

My Windows 10 Pro has been updated to 20H2 and now I can't find the favorites manager anymore, can anyone tell where it ended up?

Copper Contributor

Hi @Joe Lurie, This is a welcome addition as we've been waiting to integrate our Task Sequence into Autopilot's ESP. Doesn't seem to work out of the box though. Do you happen to know how to get it properly integrated? Google came out short when I checked. Thank you.

Microsoft

HI @BabaA This is not in full production just yet. We announced it at Ignite in September, and Windows is ready when the feature is ready. But it's not live yet.

Brass Contributor

So a client of mine just received a new W10 Pro laptop. For the first time I'm noticing that My Documents is defaulting to One Drive. I have setup other machines recently and they did not have this default. I've looked back through all the documentation of new features with Windows 10 2004 and cannot find any references to this change. When did this get announced? I have to admit that I'm busy enough that I might have missed it. 

Microsoft

Hi @Al_B_inPT The Documents folder shouldn't default to OneDrive unless a policy is telling it to do so. Its also possible that at first login, the user went through a OneDrive wizard and didn't change this (I believe the default in the OneDrive wizard is to do this, and the user would have to deselect the check boxes to opt out).

Hi,

could the Windows team consider preinstalling new Edge browser group policies in Windows 10 and remove the Edge legacy group policies?

The new Edge browser is now by default preinstalled on Windows 10, but the group policies for managing it are absent. it just makes sense to have them by default preinstalled in Windows 10 for easier management. keep the policies up to date via Windows update or Microsoft update. only takes a few kilobytes.

I made a suggestion feedback for this yesterday 

https://aka.ms/AAaqkty

 

Brass Contributor

Joe Lurie: Thanks for your thoughts. There were no policies on this machine. It came from Lenovo configured that way. I was the one who went through the setup wizard, and I've done it, oh about 300 times in the last year. I don't recall seeing anything in the wizard and I certainly did not purposely setup the machine for OneDrive to default her C:Docs to it..

 

I'm wondering whether, after the machine was setup, and I ran OneDrive to connect to all our various Sharepoint sites, that there was something hidden in there. 

 

I understand that we can set it that way *after the fact* of the installation, but I most definitely did not specifically tell OneDrive to migrate all her documents there.  On my machine, it is *not* doing that and I'm also on 2004. At least I'm glad that I'm not hearing that it's a current default of 2004. 

 

Thanks again. 

Brass Contributor

Ok. I found the answer. Inside OneDrive is a BACKUP setting. If you choose it, it will redirect (i.e. backup) all your files from My Documents and My Pictures to OneDrive. Since I did not purposely do this, I assume that it came pre-configured from the factory to do that. Worth noting. I know that future versions of Windows have been discussed to move all to this configuration, according to Windows rumors.  I guess this is a first step. While this seems like a good thing, for users that work a lot in the field off the grid, this could be a real problem if not purposely setup and trained. 

 

OneDrive Backup1.jpgOneDrive Backup2.jpg

Microsoft

@Al_B_inPT Thanks for confirming, This is the setting I was talking about when OneDrive first launches on a new login. Its selected by default, and easy to miss.

Brass Contributor

Wow. That's a very tricky thing. If you don't setup OneDrive then the C:\docs is 'normal' and if you do run OneDrive, then it will redirect a backup to OneDrive.. and the client sees something different.. while I personally don't mind this, but I wish it would have been called out in the Office 365 alerts I get every day as an admin of many O365 clients. Just a thought. Why? This client got her new machine, I set it up quickly for her, because she was heading off tomorrow off the grid for work. I looked in the C: Docs and the file names were there. I didn't think about the files not being downloaded. So she would have got there, and found that all her My Documents files were *not* on her local machine which was what she expected, since it's been that way forever. And now with no way to get them!  She could have been on a transpacific flight wanting to work on her PPT for a meeting on the other end. Or in the jungles of Brazil.

 

Luckily she noticed the odd setup. She's more savvy than many.  Hope this helps in future notifications. No emotions were harmed in the creation of this thread. Client was just grateful I got it handled. Thanks very much for taking the time to help me puzzle this out. 

 

Brass Contributor

Awesome post you put together @Joe Lurie, thanks for the ADMX template update and security feature notes. Applied the Onedrive backup policy with new imported ADMX templates and the GPO did the rest.

Copper Contributor

installation process is very slow 

Copper Contributor

tengo una duda, yo desde el 27 de enero del 2021 apague mi computador estaba bien no tenia ningún problema con mi computador y menos con la batería, lo deje cargado y lo guarde con su forro, después que volví a prenderlo apenas el 22 de febrero del 2021 volví y lo prendí normal pero no encendió pensé que tal ves estaba descargado y le conecte el cargador y prendió lo use así con el cargador conectado y en un momento lo desconecte y da la sorpresa que se apago y lo volví a conectar y prendió solo sin necesidad de oprimir el botón de encendido y me di cuenta que no estaba cargando o guardando carga 

mi duda es si el dejarlo tanto tiempo apagado afecto la batería o fue el no actualizarlo en el tiempo que tocaba ?

por favor ayúdenme o me toca mandarlo a arreglar 

Microsoft

@charli1995 I used Bing translate so I hope I understand your question :smile:

It looks like your laptop is not charging when plugged in, and does not hold a charge. I'm not sure how I can help here on this forum as this appears to be an issue with the computer itself and no with Windows 10, version 20H2. We've done a lot of work on battery life, such as Sleeping tabs in the Edge browser and other work with apps that configured to start on computer startup. But with hardware issues you're better going to another Techcommunity forum or working with the support center of the hardware manufacturer (Lenovo, Dell, Surface, etc...).

Copper Contributor

Bonjour Chère Team,

 

J'aimerais bien avoir le link pour passer à la version Windows 10 version 20H2.

Voici en revanche la version de mon Win10 en fichier image ci-joint

 


winver.png

Cordialement,

Copper Contributor

:cry:

Silver Contributor

I wonder if anyone have ran into a problem when installing 20H2 on top of 1909 from an ISO and Wifi not working properly after that. This is weird. But happened for me two times on Dell 7420. Then i tried to update from WSUS and it went fine. I am using ISO because this is what our third party deployment tool does.

Version history
Last update:
‎Oct 20 2020 11:44 AM
Updated by: