Hi Tara,
Thank you for sharing your concerns.
To upgrade to 24H2 version we have a few options:
Use Windows Update / WSUS / Windows Update for Business to deploy 24H2.
Upgrade using ISO 24H2
Regarding to your another question about 25H2 version which was released officially, if you install 24H2 now, sooner or later devices may be automatically offered 25H2 but don't worry you still able to block it. About AI features, you can manage this proactively by using Group Policy or MDM to disable AI features such as copilot,.... Here is for your references: Updated Windows and Microsoft 365 Copilot Chat experience and Group Policy processing
In your case, I recommend checking first the "msinfo32" output to verify hardware compatibility (TPM, Secure Boot, CPU generation, etc) or use the PC Health Check tool (or equivalent) to confirm whether the device is eligible for windows 11 24h2 update. Then if you are managing the large number of devices in a business environment, using WSUS or windows update for business is the best approach to deploy updates (Windows Server Update Services (WSUS) overview). Don't forget to block the 25H2 rollout and applies policy to disable AI features as mentioned above.
Hope this helps!