Windows news you can use: October 2026

October brought plenty to keep on your radar, from new Windows 11 features and accessibility improvements to security changes that might require some planning. We've pulled together the highlights, hardening changes, resources, and upcoming lifecycle milestones to help you stay ready for what's next.

New in Windows update and device management

• [CERTIFICATES] – Windows Update certificates used to establish trusted connections to Windows Update will expire in May and June 2027. Replacement certificates will reach most devices through monthly updates, but some devices might require additional IT action. Read Prepare for Windows Update certificate rotation in 2027 for details.

• [RESTORE & RECOVERY] – Users can now review their restore summary during device setup or first sign-in. Available on Windows 11, versions 24H2 and later through Windows settings backup and restore. Additionally, Cloud rebuild is now broadly available to restore a Windows 11 PC to a clean, known-good state by performing a full operating system reinstall. Devices in Windows Recovery Environment can now reuse saved Wi-Fi profiles to help regain connectivity.

• [W365] – Remote PC connections in Windows App on Windows are now generally available. The unified app lets users connect to remote PCs alongside other Windows resources.

• [NETWORKING] [INTUNE] – Microsoft Intune Endpoint Privilege Management (EPM) now lets standard users change IT-approved IPv4, IPv6, and DNS settings through Company Portal without broader administrator access. Admins can allow changes automatically or require user confirmation, including a business justification or Windows authentication.

• [INTUNE] – Starting January 15, 2027, Microsoft Intune will end support for CNAME-based auto-discovery for Windows MDM-only enrollment scenarios. This change reduces dependency on DNS-based discovery while providing a more consistent enrollment experience moving forward.

• [TOOLS] – Whether you're planning an update, checking what's new, or investigating an issue, knowing where to find the right Windows release information can save time. Bookmark the Windows release information toolbox as a quick guide to the resources that help keep you informed and prepared.

• [SYSINTERNALS] – The latest Sysinternals updates brings improvements across troubleshooting, diagnostics, remote connection, and presentation tools, including Process Explorer, Process Monitor, ProcDump, ZoomIt, and more.

• [TIME ZONE] [CANADA] – Managing devices in British Columbia, Alberta, Manitoba, the Northwest Territories, or northwestern Ontario? Affected locations did not turn their clocks back on Nov. 1, 2026, following changes to daylight saving time. Review the latest guidance and recommended actions covering impacted Microsoft products.

• [TIME ZONE] [CUBA] – Cuba announced a change to daylight saving time for 2026 on October 27, 2026. If you manage Windows devices in Cuba, review Microsoft interim guidance for addressing the time zone change.

New in Windows security

• [HARDENING] – Planned security hardening changes are rolling out beginning with the October 2026 security update. Specifically, it restricts NTLMv1-derived credentials for single sign-on on supported Windows 11 and Windows Server 2025 devices when Credential Guard is disabled. Organizations using MS-CHAPv2 for Wi-Fi, Ethernet, or VPN connections should identify affected configurations and move to certificate-based authentication to avoid potential connection issues.

• [CERTIFICATES] – Microsoft has blocked certificate authorities affected by compromised eMudhra intermediate certificate authority keys and removed seven associated certificates from the Windows and Microsoft Edge trust lists. Keep automatic Windows certificate trust and Edge component updates flowing, check disconnected devices, and replace certificates that depend on the removed certificates.

• [ENTRA] – An improved Microsoft Entra experience lets users complete registration directly during sign-in—without navigating a separate workflow. For more details, see the Deploy token protection for Windows.

• [AI] [AGENTS] – Now generally available, Microsoft Execution Containers (MXC) offer developers and IT admins a policy-driven way to contain AI agents. Specifically, limit their access to resources such as files and network destinations. Learn how MXC provides an OS-enforced boundary around agent workloads.

• [DEVELOPER] [WSL] – WSL containers are now generally available. Run Linux container workloads directly on Windows, with enterprise controls through Microsoft Intune and security visibility through Microsoft Defender for Endpoint.

New in Windows Server

For the latest features and improvements for Windows Server, see the Windows Server 2025 release notes and Windows Server 2022 release notes.

• [RECOVERY] – Quick machine recovery is now supported, but disabled by default, on Windows Server 2025. Enable the feature through Group Policy to support streamlined recovery during widespread outages and reduce the need for manual intervention.

• [ReFS] – The October 2026 security update for Windows Server 2025 adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default. Enforcement controls remain disabled by default until January 2027 to give administrators time to evaluate and prepare for future security hardening changes.

• [SECURITY] – The October 2026 security update for Windows Server 2025 also adds support for ML-KEM post-quantum key exchange in Transport Layer Security (TLS) 1.3, helping protect encrypted connections against future quantum-computing threats.

• [BROWSER] – If you use RD Web Access with Windows Server, prepare for browser changes that disable the XSLT functionality. RD Web Access relies on XSLT to render in Microsoft Edge and Google Chrome. Review the available workarounds now to help maintain access as browsers move away from XSLT.

New in productivity and collaboration

Install the October 2026 security update for Windows 11, versions 26H2, 25H2, and 24H2 to get these and other capabilities, which will be rolling out gradually:

• [FILE EXPLORER] – File Explorer Home remembers whether you expanded or collapsed sections when you last used it. The preview pane also automatically previews PDFs downloaded from the web.

• [BLUETOOTH] – Bluetooth updates improve reliability and audio performance. Check out more accurate connection and volume status, improved microphone compatibility, and greater stability for LE Audio and shared audio accessories.

• [ACCESSIBILITY] – The new "Open apps maximized" setting automatically maximizes app windows when they open. This accessibility improvement supports screen reader and magnification workflows, tablet use, and anyone who prefers a consistent full-screen workspace.

• [TOUCHPADS] – Gesture controls for touchpads now include single-finger scrolling and automatic scrolling.

• [KEYBOARD] – You can now remap the Copilot key to work as the Right Ctrl or Context Menu key. Maintain familiar keyboard shortcuts and accessibility workflows.

New features and improvements are coming in the November 2026 security update. You can preview them by installing the October 2026 optional non-security update for Windows 11, versions 26H2 and 25H2. This update includes the gradual rollout of:

• [BROWSER] – Microsoft Edge on Windows now supports Accelerated App Launch. This means you'll see a faster and more consistent experience opening Microsoft Edge on Windows. The biggest improvements are when your device is busy or under load.

• [APP MANAGEMENT] – You can now manage the removal of supported in-box apps on Windows 11 Enterprise and Education devices in multi-session environments. Learn more in Policy-based in-box app removal.

• [FILE EXPLORER] – An updated context menu opens more quickly, reduces clutter, and gives you more control over the commands and app extensions that appear when you right-click (or select and hold). Key file information, such as name, location, and date, now appear on the File Explorer search results page, making search results easier to scan.

• [PRIVACY] – The Privacy & security page in Windows Settings groups related Camera, Microphone, and Location privacy controls and integrates usage information for easy reference.

• [ACCESSIBILITY] – Try new Magnifier options to customize how content appears and behaves across displays. They include a contrast theme toggle, independent zoom levels for each monitor, and viewport locking to keep a magnified view in place while you work on another display. Narrator now supports reading and navigating math equations in supported Microsoft 365 apps and supported web content in Microsoft Edge.

• [PERFORMANCE] – Improvements to adaptive hibernate provide more instant-on resumes from Modern Standby. Help preserve battery life by adjusting when devices enter hibernation based on battery level.

Lifecycle reminders

• [W11] [23H2] – On November 10, 2026, Windows 11, version 23H2 Enterprise and Education editions will reach end of updates. We recommend updating eligible devices to a supported version of Windows 11.

• [WS2016] – Windows Server 2016 reaches end of support in January 2027, after which it will no longer receive security updates. If you still manage Windows Server 2016, plan your transition to a supported version such as Windows Server 2025. Extended Security Updates are available for eligible editions if you need additional time.

• [W10] [LTSC] – Windows 10 Enterprise LTSC 2021 reaches end of updates on January 12, 2027, after which devices will no longer receive security updates. We recommend that you move to Windows 11 Enterprise LTSC 2024, with Extended Security Updates available for eligible devices if you need additional time.

Check out our lifecycle documentation for the latest updates on Deprecated features in the Windows client and Windows Server 2025.

Additional resources

Looking for the latest news and previews for Windows, Copilot, Copilot+ PCs, the Windows and Windows Server Insider Programs? Find out this and more through the following resources:

• Microsoft 365 Copilot release notes for latest features and improvements

• Windows Insider Blog for what's available in the Beta and Experimental channels

• Windows Server Insider for feature preview opportunities

• Understanding update history for Windows Insider preview features, fixes, and changes to learn about the types of updates for Windows Insiders

   

Continue the conversation. Find best practices. Join the Windows Tech Community.

For updates on new releases, tools, and resources, bookmark the Windows IT Pro Blog and follow @WindowsUpdate on X. For the latest on how Windows is evolving for organizations and the people who support them, follow Windows at Work on LinkedIn.