Windows 11, version 24H2: What’s new for IT pros

Windows 11 version 24H2, also known as Windows 11 2024 Update, is now available through Windows Server Update Services (WSUS) and Windows Update for Business. You can also download it from .Microsoft 365 admin center^[1],software download service (via Installation Assistant, Media Creation Tool, or ISO)Visual Studio Subscription.

Today marks the start of 36 months of support for the Enterprise and Education editions of Windows 11, version 24H2.^[2]. We recommend that your organization begin targeted deployments now to ensure that your apps, devices, and infrastructure work as expected with the new release. To help you plan, this post outlines some of the features and improvements that will help you deliver a great experience while protecting your company data, apps, and people across all devices.

What’s new in this update

Windows 11 version 24H2 includes all the features delivered as part of our ongoing innovation for Windows 11 and are now enabled by default. These include:

• Windows Local Administrator Password Solution (LAPS) policy improvements and new automatic account management features
• Personal Data Encryption (PDE) allows you to protect known Windows folders (Documents, Desktop, and Pictures) with user-authenticated encryption.
• App Control for Business (formerly Windows Defender Application Control) to better protect your digital assets from malware.
• With Windows Protected Print Mode, you don’t have to rely on third-party software installers for Morpia-certified printers.
• Local Security Authority (LSA) protection, which prevents theft of secrets and credentials used for logon
• Wi-Fi 7 support
• Bluetooth® LE audio support for auxiliary devices
• New controls to help you manage which apps can access your list of nearby Wi-Fi networks
• Rust in the Windows kernel
• SHA-3 support

Windows 11 version 24H2 also introduces various Server Message Block (SMB) protocol changes. This includes firewall rule changes, NTLM blocking support, language management, alternate network port connections, SMB over QUIC (replaces TCP and RDMA), and changes to SMB signing and encryption.

This scope release also includes enhancements designed to improve the overall experience of Windows 11, including:

We’ve also added new features to control audio presets for Bluetooth® LE audio, ambient sounds, and more. We’ve made it possible for people to adjust their hearing aids’ audio presets in Settings or Quick Settings.

Find out more about what’s new, including a list of features that are temporarily no longer under corporate control and Copilot+ PC-only features.What’s new in Windows 11 version 24H2.

You can also take a closer look in our special episode of Microsoft Mechanics.

Updated deployment and management tools

Many of the deployment, security, and management tools you use have been updated or refreshed and are available starting today! These include:

• Windows 11, version 24H2 security baseline – Download Microsoft recommended configuration settings and explanations of their security implications.
• Administrative Templates (.admx) for Windows 11 version 24H2 – Most popular request! By default, you can access it via:C:\Windows\Policy Definitions\You can download ADMX separately to a folder in Windows and use it to populate policy settings.
• Group Policy Settings Reference Spreadsheet for Windows 11, version 24H2 – Download the policy settings spreadsheet for computer and user configuration included in the ADMX file for Windows 11, version 24H2.
• Remote Server Administration Tools (RSAT) for Windows 11 – Manage Windows Server roles and features on Windows 11 devices. To add RSAT as a feature on demand (FOD) in Windows 11, go to:Settings > Apps > Add-ons > Add add-on. chooseView featuresSearch for ‘RSAT’.
• Windows 11 Enterprise Trial – Interested in trying Windows 11 Enterprise or Windows 11 Enterprise LTSC on behalf of your organization? Download a 90-day free trial.
• Windows 11, version 24H2 update history – Quickly access release notes for monthly security updates, optional non-security releases, and out-of-band updates.
• Windows release status – Find information about known issues, workarounds, and safeguards to help you plan your updates. Add to bookmarks Windows Message Center Check out updated related news and announcements. If you are a Windows administrator, you can access more information and subscribe to notifications here: Microsoft 365 admin center.

We are working on quick updates Windows 11 Deployment Lab Kitprovides automatically provisioned lab environments and lab guides to help you plan, test, and validate your deployment. follow us linkedin or @MSWindowsITPro We will let you know when an updated kit becomes available.

Long Term Servicing Channel (LTSC)

We’ve also released two versions of Windows 11 in our long-term servicing channel for organizations with special-purpose devices and environments, such as manufacturing or healthcare systems. Windows 11 Enterprise LTSC 2024 and Windows 11 IoT Enterprise LTSC 2024. LTSC is designed for fixed-function, special-purpose devices that require a longer support life cycle. Windows 11 Enterprise LTSC 2024 is available in per-user or per-device models, depending on the volume licensing program purchased. Windows 11 IoT Enterprise LTSC 2024 is available directly from Microsoft through original equipment manufacturers (OEMs) or through volume licensing.

Make Windows Updates Easier

If you want to spend less time managing updates, now is a good time to look into: Windows automatic patching. Windows Autopatch, included in Windows Enterprise E3 (and later), makes it easier to manage feature and monthly security updates for Windows, as well as updates to Microsoft 365 Apps for enterprise, Microsoft Edge, and Microsoft Teams. Watch the following video for a closer look at this cloud service: Latest episodes of Tackling Tech.

Sign up for more help, tips, and best practices.Windows office hours It’s the third Thursday of every month on the Windows Tech Community! We’ve brought together experts from the Windows, Intune, and Windows 365 product teams, adoption experts, and Fast Track to chat to answer your questions. join usThursday, October 17And bookmarkhttps://aka.ms/Windows/OfficeHoursAbout the upcoming date.

Frequently Asked Questions

Is there an activation package for this release?
no. Windows 11 version 24H2 requires a full OS replacement and cannot be deployed using servicing technologies. Additionally, to update to version 24H2, your device must be running Windows 11 version 23H2 or 22H2 with the May 2024 Non-Security Preview Update installed.

Can my organization’s devices upgrade directly from Windows 10 to this new update?
yes. You can upgrade your device directly from Windows 10 to Windows 11 version 24H2.^[4] Use the target version feature of Windows Update for Business, Windows Update for Business Deployment Service, and feature update deployment in Windows Autopatch. In fact, Windows 10 will end support on October 14, 2025, so you’ll want to start upgrading right away. Use the following to prepare your end users:Windows 11 Onboarding KitWe provide ready-to-use, customizable resources you can use to prepare and support your users to get the most out of Windows 11. If you need a little more time to transition from Windows 10 to Windows 11 or are procuring a new device, you can also explore Windows 10 Extended Security Updates (ESU) Program.

How can I test new features in Windows 11 before they are released?
join Windows Insider Program . You can access preview builds of Windows 11 to try out new features, provide feedback directly to Microsoft, and, if you want, deploy early builds across your organization to test apps, hardware, and processes. Would you like to work directly with the Windows engineering team to develop a solution that better meets your needs? join Microsoft Managed Customer Connection Program.

What happens if my application is not compatible with Windows 11 version 24H2?
Windows 11 is the most compatible Windows operating system ever. However, if application compatibility issues arise, we App Guarantee Our team is here to help.

Does this release of Windows 11 include the Windows Server release?
Windows Server 2025 is currently in preview. For more information, see:What’s new in Windows Server 2025 (Preview) .

Are there any new features in Copilot+ PC?
Copilot+ PCs run Windows 11, version 24H2, so you can take advantage of the productivity, accessibility, and sustainability features found only on Copilot+ devices. we Copilot+ PC launchedEquipped with features such as real-time translation and Paint Cocreator New features announced today^[5] It will be rolled out to Windows Insiders in stages starting in November for select devices and markets. Our goal is to ensure IT managers have the control they need to confidently deploy Copilot+ PCs and the proprietary AI features that run on them. With this latest update, we’ve provided additional control across Copilot+ PC capabilities and provide more capabilities to help your organization’s IT deploy these AI experiences. To learn more about what’s next for Copilot+ PCs and how IT managers can take control, watch: Microsoft IgniteNovember this year.

Have there been any changes to the recall security status of Copilot+ PCs?
Recall is a brand new way to instantly find what you’ve previously seen on your PC. We have worked hard to carry out a recall based on your feedback.^[6] With enhanced security by default, you can rest assured that your data is safe and secure. Recalls are also turned off by default for all ads.^[7] device. Before users can opt in, you must allow reclaim through policy. Once activated, the device uses Windows Hello to verify a person’s identity (and presence) and then securely unlocks the Recall experience. Please see our recent article for more details. Recall security and privacy architecture updates . We’ll share more about Recall controls and other Copilot+ PC news at Microsoft Ignite.

Additional Resources

Keep the conversation going. Find best practices. Add to bookmarks Windows Technology Communitythen follow us @MSWindowsITProAnd on and on linkedin. Looking for support? visit Windows on Microsoft Q&A .

^[1] Downloads from the Microsoft 365 admin center and similar channels may be delayed.

[2] Home and Pro editions of Windows 11 version 24H2 receive 24 months of support. For more information, see: Windows Lifecycle FAQs .

^[3] CABC (Content Adaptive Brightness Control) is not available on all laptops or 2-in-1 devices. This is because it must be enabled by your device manufacturer in order to function.

[4] If you identify an issue that may cause a feature update to fail or be rolled back. protection deviceIt may be applied to prevent affected devices from installing updates and to protect devices from harsh environments.

^[5] Availability may varyBased on a variety of silicon platforms.

^[6] Starting in October, Windows Insiders will see recalls on Snapdragon-based Copilot+ PCs. People buying Intel or AMD-based Copilot+ PCs will first see the recall under the Windows Insider program starting in November. Timing and details on Recall’s widespread availability will be shared at a later date. Security continues to be our top priority, and we will post a blog with more details about recalls for Windows Insiders as they become available.

[7] Commercial devices are defined as devices running an Enterprise or Education SKU, devices running a premium SKU managed by your IT administrator (via Microsoft Intune or another endpoint management solution), devices with a volume license key, or devices that are subscribed. To the domain.