Windows message center

IT admin, you’re now more in control of provisioned Microsoft Store apps than ever. Starting this month, you can remove select in-box apps using straightforward policy on Windows 11 Enterprise or Windows 11 Education, version 25H2. The new policy, called Remove default Microsoft Store packages from the system, is disabled by default. Learn more about how it works, why it matters, the apps it applies to, and how you can configure it with Microsoft Intune or using Group Policy. Find all the details at Policy-based removal of pre-installed Microsoft Store apps. 

Microsoft has identified a remote code execution (RCE) vulnerability in the Windows Server Update Services (WSUS) reporting web service. Windows servers that do not have the WSUS server role enabled are not vulnerable to this vulnerability. For more information about the security fix, see CVE-2025-59287.

An out-of-band (OOB) update was released today, October 23, 2025, to address this issue. This is a cumulative update, so you do not need to apply any previous updates before installing this update, as it supersedes all previous updates for affected versions. If you haven’t installed the October 2025 Windows security update yet, we recommend you apply this OOB update instead. After you install the update you will need to reboot your system.

 

If you have not yet deployed the October 2025 Windows security update and your IT environment includes devices running on the versions of Windows listed below, we recommend you apply this OOB update instead:

Windows 11 now integrates AI deeply into the operating system (OS), enabling secure, scalable, and agentic work environments. Multiple new features are coming to Windows 11 devices where Copilot is available, starting with Windows Insiders in Copilot Labs. Additionally, Copilot+ PCs deliver native AI experiences with features like Click to Do, Copilot Voice, Copilot Vision, and Copilot Action. Windows 365 further extends this AI-ready environment to the cloud. When these innovative features become available to organizations, IT admins can deploy and manage them using existing tools, ensuring compliance and security. Read more at How Windows 11 and AI are transforming the future of work, as you get ready for more announcements at Microsoft Ignite in November. 

As an IT admin, use the newly published guide and tools to start updating your organization’s expiring Secure Boot certificates. As the 2011 certificate authorities (CAs) start expiring in June 2026, 2023 CAs are required. Updated CAs allow Secure Boot to continue preventing malware early in the startup sequence. Find the deployment playbook in the updated Secure Boot certificate updates: Guidance for IT professionals and organizations. Learn how to use new registry keys, Windows Event Log, and Windows Configuration System (WinCS) APIs to monitor, deploy, and troubleshoot Secure Boot CAs. 

The October 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Today, October 14, 2025, Windows 10 has reached end of support*. The October 2025 monthly security update is the final update available for the last supported versions: Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions), Windows 10 2015 LTSB, and Windows 10 IoT Enterprise LTSB 2015. Devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

*Note: Long-Term Servicing Branch (LTSB) and Long-Term Servicing Channel (LTSC) releases are subject to different lifecycle support policies. Check out the Microsoft lifecycle website for more information. 

Today, October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) has reached end of servicing. The October 2025 monthly security update is the final update available for this version. Devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Hotpatch updates, which are smaller than standard Windows updates, bring faster security and improved productivity to your organization. Their smaller size translates to optimized network performance, sustainability benefits, faster installation, and quicker compliance. Hotpatch updates build on top of the most recent quarterly baseline update and are installed without a restart. Learn more about using smaller hotpatch updates to simplify and modernize update management in Hotpatch efficiency unlocked: Smaller update size.

On November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing. The November 2025 monthly security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the October 16 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover news about Windows 11, version 25H2 general availability, advantages of Microsoft Purview and Microsoft Defender to help reduce data breaches and build resiliency, plus enhancements to Windows 365, update and driver management, productivity features, AI, and much more. Learn how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security. Get started with September 2025 improvements in Windows 11.

Does your organization use hotpatch quality update policies and want to upgrade to Windows 11, version 25H2? Plan when to upgrade because it can affect whether devices continue to receive hotpatch updates during the current hotpatch cycle. Devices that upgrade during a designated baseline release period (such as October) will remain eligible for hotpatching. Devices that upgrade during a non-baseline month (such as November) will temporarily stop receiving hotpatch updates. Instead, these devices will receive standard security updates that require a restart until the next baseline release (that is January 2026). For complete information, review the hotpatching release cycles.

Today, we announced the beginning of availability of Windows 11, version 25H2 via a controlled feature rollout. This new version is available first for users with devices running version 24H2 who have already turned on the “Get the latest updates as soon as they’re available” toggle. The phased rollout is starting gradually, and availability will expand over the next few months. Installation will be fast and easy as this update will be delivered with the same technology used for monthly security updates. Want to learn about how to update to Windows 11, version 25H2? Watch this video. 

 

Note: If we detect that your device may have an issue, such as application incompatibility, we may put a safeguard hold in place and not offer the update until that issue is resolved.  

If you are an IT administrator, see An IT pro's guide to Windows 11, version 25H2 for information on commercial release channels, deployment tools, and enhancements for commercial organizations.

The September 2025 non-security preview update is now available for Windows 11, version 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Starting with the September 2025 Windows preview non-security update, a significant leap forward in wireless networking reaches Windows 11, version 24H2 and later. Windows 11 has already supported Wi-Fi 7 for consumer access points since 2024. Now, your organization can also benefit from better speed, high throughput, improved reliability, and enhanced security for modern enterprise environments that support Wi-Fi 7 enterprise access points. Read about the benefits and how to get started in Introducing Wi-Fi 7 for enterprise connectivity. 

If you’re an IT admin, you might have questions about Windows Secure Boot certificate expiration. It’s best to update Secure Boot certificates well before the June 2026 expiration date. Check out an initial set of frequently asked questions and answers that will be updated with time. Explore different scenarios and recommendations that will help you plan and prepare. Read Frequently asked questions about the Secure Boot update process. 

The September 2025 non-security preview update is now available for Windows 10, version 22H2. The non-security preview update for Windows 11, version 24H2 will be available soon.

Note: The September 2025 non-security preview update is the final non-security preview update for Windows 10, version 22H2.

Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

The September 2025 non-security preview update is now available for Windows 11, version 23H2. The non-security preview update for Windows 11, version 24H2 and Windows 10, version 22H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

If you’re an IT admin using Windows Management Instrumentation Command-line (WMIC) tool, prepare for change. WMIC will be removed when upgrading to Windows 11, version 25H2. All later releases for Windows 11 will not include WMIC added by default. Microsoft recommends using PowerShell and other modern tools for any tasks previously done with WMIC. Note: Windows Management Instrumentation (WMI) itself remains part of Windows. Get more context and mitigation guidance at Windows Management Instrumentation Command-line (WMIC) removal from Windows.

Connecting PCs to mobile data is now simpler. The Mobile Plans app will be retired in February 2026. Instead, please use your web browser and the Windows Settings app. The web-based experience is available from your mobile operator’s portal for purchasing and activating your cellular data plans. From Windows Settings, you can consent to securely sharing your device data with your mobile operator and thus allow automatic provisioning of your eSIM and instant download and use of cellular data. Learn about what this means to users and mobile operators at Mobile Plans moves to the web. 

On October 14, 2025, Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. October 14, 2025 will also mark the end of support for Windows 10 2015 LTSB and Windows 10 IoT Enterprise LTSB 2015. The October 2025 monthly security update will be the last update available for these versions. After this date, devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates after servicing ends in October. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. The October 2025 monthly security update will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing. The November 2025 monthly security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

Starting with the September 2025 security update, IT admins can configure an initial Start menu layout that users can later customize. If you’ve used the Configure Start Pins policy previously, it would revert user personalization to the IT-set configuration after a restart. The enhanced policy allows user changes to persist. This new capability is available to you through configuration service providers (CSP) today, and the Group Policy (GPO) will follow in October.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the September 18 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The September 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Note: To address an issue with Windows Powershell PSDirect connections, Microsoft recommends applying the September 2025 security update for Windows PowerShell in hotpatched devices.

Windows updates released September 9, 2025 and later, introduce security hardening changes to certificate mapping requirements in Windows Servers. Servers which run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, are now required to meet certain certificate mapping criteria in order for authentication operations to succeed. These changes address vulnerabilities discussed in CVE-2022-34691 and others.

The is the final milestone of a rollout that has gradually been taking place since 2023. Beginning with the September 9 updates, previous methods of grading enforcement across environments have been disabled. IT administrators need to take action to ensure normal operations in accordance with the new certificate mapping criteria, and install the September 9, 2025 updates. If certificates cannot be strongly mapped per the security measures following installation of this update, certain authentication operations might be denied.

As always, we recommend that you update your devices to the latest security update available to take advantage of the advanced protections from the latest security threats. For full details, see KB5014754: Certificate-based authentication changes on Windows domain controllers.

If you’re an IT admin using Windows Server Update Services (WSUS), important hardening changes are here. Starting with the September 2025 security update, WSUS running on Windows Server 2025 is removing dependencies on old code that’s no longer supported. This means that Windows operating systems (OS) that reached the end of their lifecycle will no longer qualify to receive extended security updates (ESU), unless you take additional action. Specifically, if you’re using ESUs for Windows Server 2012 and Windows Server 2012 R2, read about short-term and long-term next steps.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover enhancements to the Windows out-of-box experience (OOBE) for quality updates, Windows Backup for Organizations, hotpatching, productivity features, update and driver management, AI, and more. Learn how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security.

The August 2025 non-security preview update is now available for Windows 11, version 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Since 2023, Microsoft has been sharing reminders of changes coming to certificate mapping security requirements in Windows Servers. These changes address vulnerabilities discussed in CVE-2022-34691 and others. As part of these changes, servers which run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, will be required to meet certain certificate mapping criteria in order for authentication operations to succeed. 

The final milestone of this rollout will take place with Windows updates released September 2025. Up until the installation of this September update, it is possible to use registry keys to control the degree to which security requirements are enforced. However, after the September updates, this ability to bypass security criteria will end and these registry keys will no longer be supported. From that time on, certain authentication operations will be denied if certificates cannot be strongly mapped per the security measures. 

We recommend that IT administrators conduct testing to confirm normal operations. And as always, we advise that devices are updated to the latest security update available, to take advantage of the advanced protections from the latest security threats. For full details on these security hardenings and how to detect any related issues in your environment, see KB5014754: Certificate-based authentication changes on Windows domain controllers.

The August 2025 non-security preview update is now available for Windows 11, version 23H2 and Windows 10, version 22H2. The non-security preview update for Windows 11, version 24H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Note: The September 2025 non-security preview update will be the final non-security preview update for Windows 10, version 22H2.

Windows Backup for Organizations is now generally available. It provides a simple and secure way to back up and restore settings and the list of Microsoft Store apps on eligible enterprise devices running Windows 10 and Windows 11, version 22H2 and higher. With the capability during the out-of-the-box experience (OOBE) to restore a familiar experience on a new device or after a device reset or reimage, users can get back to work faster with less troubleshooting and higher productivity. And, if you’re still in the process of moving from Windows 10 to Windows 11, Windows Backup for Organizations can help streamline the transition. Learn more about how to get started at Windows Backup for Organizations is now available. 

Starting in September 2025, the latest Windows quality updates will be available by default during the out-of-box experience (OOBE). With Windows Autopilot and Microsoft Intune, you can manage this capability with a policy setting for eligible Microsoft Entra joined or Microsoft Entra hybrid joined devices running Windows 11, version 22H2 or higher. Additional key benefits with this new default experience? Security is enhanced from day 1, and post-deployment update overhead is reduced. Learn more about this upcoming capability, including device prerequisite details, customizable settings for the experience, and alternative management solutions for OOBE updates at Get ready for Windows quality updates out of the box.

Microsoft Secure Boot certificates will begin expiring in June 2026. To maintain a secure boot process and ensure the continued delivery of security updates, updated certificates will be released via Windows Update in the coming months. Devices that do not receive these updated certificates may stop receiving security updates and face increased vulnerability to security threats.

IT-managed environments should begin preparing now. This includes checking with OEMs for the latest available firmware updates, reviewing Microsoft’s Secure Boot certificate rollout landing page, and selecting an update path. Organizations can opt into Microsoft-managed updates, select upcoming self-service or partially automated solutions or follow the manual steps outlined in the guidance for Windows devices for businesses and organizations with IT-managed updates.

For more information on Secure Boot certificates, including the impact of this change and the actions needed to prepare, see Act now: Secure Boot certificates expire in June 2026.

Prepare for hotpatch in your environment by meeting a key requirement to enable virtualization-based security (VBS) on Windows client. With the hotpatching feature of Windows Autopatch, you can apply security updates to Windows without requiring a restart. VBS protects against kernel-level exploits and other advanced threats to help ensure your endpoints are secure and ready for patching. It’s straightforward to enable VBS, and here we’ll show you how—whether deploying at scale using Microsoft Intune or on a single device using PowerShell or Windows Command Prompt. Find step-by-step instructions to enable VBS and to validate and monitor enablement at Hotpatch readiness: Enable VBS at scale. 

Microsoft has identified an issue where some attempts to reset or recover Windows devices might fail. This issue is observed after installing the August 2025 Windows security update on some client versions of Windows. For more information on this issue, see Reset and recovery operations on some Windows versions might fail.

A non-security out-of-band (OOB) update was released today, August 19, 2025, to address this issue. This is a cumulative update, so you do not need to apply any previous updates before installing this update, as it supersedes all previous updates for affected versions. If you haven’t installed the August 2025 Windows security update yet, we recommend you apply this OOB update instead. If your device is not affected by this issue, you do not need to install this OOB update.

For more information and instructions on how to install this update on your device, consult the below resources for your version of Windows:

If you're a member of the Windows Insider Program, your Windows updates include preview features, fixes, and changes that are a part of the program. To see a list of updates that have been installed on your device, go to Settings > Windows Update > Update history. Read Understanding update history for Windows Insider preview features, fixes, and changes to help you understand the types of updates you may encounter as a Windows Insider. It also provides links to official Microsoft resources where you can learn more about each update type.

Want early access to new Windows features and improvements before they're officially released? Visit the Windows Insider Program official support page to learn how to Join the Windows Insider Program and manage Insider settings.

You can also visit the Windows Insider blog and Windows roadmap. These are great resources for IT pros, developers, and enthusiasts who want to stay up to date on what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

On October 14, 2025, Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. October 14, 2025 will also mark the end of support for Windows 10 2015 LTSB and Windows 10 IoT Enterprise LTSB 2015. The October 2025 monthly security update will be the last update available for these versions. After this date, devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates after support ends in October. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. The October 2025 monthly security update will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the August 21 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

Microsoft has introduced a hardening change to strengthen the Microsoft RPC Netlogon protocol by blocking RPC anonymous requests used to locate domain controllers. This change was Enabled by Default in the May 2025 Windows security update for Windows Server 2025, and in the July 2025 Windows security update for all supported versions from Windows Server 2008 SP2 through Windows Server 2022. This change is configurable by policy after installing the August 2025 Windows security update. See the article, KB5066014—Netlogon RPC Hardening (CVE-2025-49716), for details. 

 

After applying these updates and subsequent updates, Active Directory domain controllers will reject certain anonymous RPC requests. This may affect interoperability with services like Samba unless they are updated to meet the new access requirements.

 

To prepare for this update, review your environment for any dependencies on anonymous Netlogon RPC requests. If your organization uses Samba, refer to the Samba release notes for guidance on compatibility. It is also recommended to test the update in a staging environment to identify and address any potential disruptions before full deployment.

 

For more information, see the May or July KB update article that matches your server version’s security update.

On November 11, 2025, Windows 11, version 23H2 (Home and Pro editions) will reach end of servicing. The November 2025 monthly security update will be the last update available for these editions. After this date, devices running these editions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 23H2 reaching end of updates (Home, Pro)

lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

The August 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

IT pros: Windows PowerShell 2.0 is removed from Windows 11, version 24H2 starting with the August 2025 non-security update. It’s also removed from Windows Server 2025 starting with the September 2025 security update. Windows Insider preview builds already reflect this change as of July 2025. Windows PowerShell 2.0 is over 14 years old, lacks many security enhancements of the later versions, and has been deprecated since 2017. By using the newer and supported PowerShell 7 or PowerShell 5.1, you can help ensure that scripts run safer. If you have legacy scripts or software that explicitly depend on PowerShell 2.0, you’ll need to either update them or use a workaround to prevent disruptions. Read PowerShell 2.0 removal in Windows for further details.

Emerging technologies including AI and agents are reshaping the cybersecurity landscape and how organizations operate. Read about five key trends in security, new risks, and the steps organizations can take to stay agile, protected, and prepared. Read more at Security leadership in the age of constant disruption.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover enhancements to Microsoft Store apps, hotpatching, Windows Autopilot, update and driver management, AI, and more. Learn how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security.

If you manage Windows devices for your organization, see how you can migrate to Windows 11 with cloud-native management. Follow 5 steps to turn your Windows 10 domain-joined and co-managed devices to Microsoft Entra joined with Microsoft Intune. The same steps apply if you’re transitioning away from hybrid joined Windows 11 devices. Find the details at Windows 11 cloud-native migration with Microsoft Intune.

If your role includes updating Windows across your organization, this Windows Autopatch upgrade playbook is for you. Use Windows Autopatch groups to gradually roll out Windows 11 before Windows 10 reaches end of servicing on October 14, 2025. Assess Windows 11 readiness before segmenting devices into Windows Autopatch groups. Configure how fast the feature update rolls out with the multi-phase release schedule. Finally, monitor your rollout with feature update reporting. Read all the details for more and less common scenarios in Upgrade to Windows 11 with Windows Autopatch groups.

On October 14, 2025, Windows 11, version 22H2 (Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. The October 2025 monthly security update will be the last update available for this version. After this date, devices running this version will no longer receive monthly security and preview updates containing protections from the latest security threats.

As always, we recommend that you update your devices to the latest version of Windows 11. For detailed information, see the Windows 11, version 22H2 reaching end of updates (Enterprise, Education, IoT Enterprise) lifecycle page. For information about servicing timelines and lifecycle, see Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

On July 28, IT admins can get answers and insights from the engineering teams behind the latest Windows deployment, servicing, and management capabilities at a new Windows edition of Tech Community Live. The agenda features three hours of Ask Microsoft Anything (AMA) sessions: 

No registration is required. Add sessions to your calendar and post your questions in advance or during the live event. 

The July 2025 non-security preview update is now available for Windows 11, versions 24H2 and 23H2, and Windows 10, version 22H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

(Updated) Note: The June 2025 non-security preview update (KB5060826) was the final non-security preview update for Windows 11, version 22H2. This version will continue to receive monthly security updates until the end of servicing on October 14, 2025.

Starting today, Windows 11 and Copilot+ PC users will find new experiences and AI-powered features that make Windows more intuitive, accessible, and useful. Use your own words to navigate settings, get things done faster with new Click to Do actions, or change the way you engage with your PC using Copilot Vision on Windows. Creators can take advantage of professional lighting controls for their photos or use smart selection tools to help isolate and edit individual elements. To explore these and other helpful new capabilities, like Quick Machine Recovery, see the Windows Experience Blog.

With the July 2025 optional non-security preview release, Windows 11, version 24H2 is introducing a new user experience for unexpected restarts. The experience offers a short, simple message for the user plus a hex version of the stop code to help IT admins quickly gather more information about the issue. In addition, with this release, quick machine recovery is now generally available. With targeted, automated fixes delivered through the trusted Windows Update pipeline, this feature reduces downtime, eases IT burden, and helps users return to productivity, quickly, reliably, and at scale. To take a closer look at these advancements, see Resilience in action for Windows devices. 

Built-in Windows apps have a significant update through media releases of Windows 11, version 24H2 and Windows Server 2025. If you’re an IT admin, use media refreshed in or after June 2025 with newer versions of 36 inbox apps for client and 2 for server for a more secure, compliant, and user-friendly experience. There’s no longer a need for immediate updates from the Microsoft Store. Learn more about this new experience: Inbox Microsoft Store apps update in Windows media. 

More enterprise environments can now experience the power of security updates that don’t require a restart. Hotpatching is now available for Windows 11, version 24H2 Arm64 devices. All you need to do is check your prerequisites, disable Compiled Hybrid PE (CHPE), and enroll these devices into a quality update policy with hotpatching enabled. See the technical guide at Hotpatching now available for 64-bit Arm architecture. 

On October 14, 2025, Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions) will reach end of servicing. October 14, 2025 will also mark the end of support for Windows 10 2015 LTSB and Windows 10 IoT Enterprise LTSB 2015. The October 2025 monthly security update will be the last update available for these versions. After this date, devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.

As we shared last October, for the first time ever, you can enroll your personal Windows 10 PC in the ESU program and receive critical and important monthly security updates after support ends in October. See Windows 10 Consumer Extended Security Updates (ESU) program for detailed information on the ESU program for personal devices. See Enable Extended Security Updates (ESU) to learn more about the ESU program for organizations.

As always, we recommend that you update your devices to the latest version of Windows 11. For information about servicing timelines and lifecycle, see Windows 10 release information, Windows 11 release information, Lifecycle FAQ - Windows, and Microsoft Lifecycle Policy search tool.

How informed and prepared are you for Windows updates and changes? Bookmark the tools we’re constantly updating and improving based on your feedback. This toolbox consolidates some of the following key links and support resources to streamline planning and deployment: 

Learn more and get started with each in Your Windows release information toolbox.

Microsoft has introduced a hardening change to strengthen the Microsoft RPC Netlogon protocol by blocking RPC anonymous requests used to locate domain controllers. This change was Enabled by Default in the May 2025 Windows security update for Windows Server 2025, and in the July 2025 Windows security update for all supported versions from Windows Server 2008 SP2 through Windows Server 2022. This change is configurable by policy after installing the August 2025 Windows security update. See the article, KB5066014—Netlogon RPC Hardening (CVE-2025-49716), for details. 

 

After applying these updates and subsequent updates, Active Directory domain controllers will reject certain anonymous RPC requests. This may affect interoperability with services like Samba unless they are updated to meet the new access requirements.

 

To prepare for this update, review your environment for any dependencies on anonymous Netlogon RPC requests. If your organization uses Samba, refer to the Samba release notes for guidance on compatibility. It is also recommended to test the update in a staging environment to identify and address any potential disruptions before full deployment.

 

For more information, see the May or July KB update article that matches your server version’s security update.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the July 17 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

The July 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

Windows updates released on or after April 8, 2025, contain protections for a vulnerability with Kerberos authentication. These protections are deployed in phases. The second phase, Enforced by Default phase, begins today, July 8, 2025.

To learn more about these protections, see Guidance for applying protections related to CVE-2025-26647.

Hotpatching Windows 11 devices at your organization just got easier. New quality update policies created in Windows Autopatch now have hotpatch updates enabled by default. This means fewer restarts and faster security updates for your managed devices. Learn how to get started with hotpatch updates today.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover enhancements to hotpatching, role-based access control (RBAC) in Windows Autopatch, and several productivity features. See how to get started with these and other improvements across Microsoft Intune, Windows Server, and Windows security.

Moving to Windows 11, version 25H2 is as easy as a quick restart if you’re on version 24H2! Today, Windows 11, version 25H2 became available to the Windows Insiders in the Dev Channel. In the second half of 2025, it will be broadly available through an enablement package (eKB). Learn how this technology simplifies feature updates for your scenario. Note that a fresh support cycle begins on the date of general availability. Find more details in Get ready for Windows 11, version 25H2. 

The June 2025 non-security preview update is now available for Windows 11, versions 24H2, 23H2, and 22H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

In the coming months, Microsoft will be rolling out updated Secure Boot certificates needed to ensure a secure startup environment of Windows. Current certificates will start expiring in June 2026 on all Windows systems released since 2012, except for 2025 Copilot+ PCs. This also affects third-party operating systems. Start by checking on the latest available firmware from original equipment manufacturers (OEMs) and enabling Windows diagnostic data. Visit the Secure Boot certificate rollout landing page for guidance for personal devices and IT-managed systems.  

The June 2025 non-security preview update is now available for Windows 10, version 22H2. The non-security preview update for Windows 11, versions 24H2, 23H2, and 22H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

As part of ongoing improvements, the Microsoft 365 Feed widget is no longer available with the Microsoft 365 Feed app for enterprise and business users. We plan to reintroduce it in the future with new features. In the meantime, users can explore alternative Widgets available in the Microsoft Store. Only enterprise and business devices are affected, and IT admins should be prepared to address questions about the widget's unavailability.

Learn more about at What are Widgets, and How Do I Use Them? and Stay up to date with widgets.

Starting in July 2025, Microsoft is updating the logic used by Application Control for Business to handle signer rules that rely on TBS (To Be Signed) hash values for Microsoft intermediate certificate authorities (CAs). No policy updates are required if your existing rules reference the expiring CAs. The new logic is part of recent Windows updates, and it allows Application Control to automatically infer trust for the new 2023 and 2024 CAs.

For more information about the expiring CAs and their expiration dates, see Windows support for the Application Control for Business new CA handling logic.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the June 19 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

IT admins, use expanded role-based access control (RBAC) to better manage access permissions to Windows Autopatch resources. Start by enforcing least privilege access with the new Windows Autopatch administrator and the Windows Autopatch reader roles. Learn how to assign the right permissions, apply Microsoft Intune scope tags as needed, and manage Windows Autopatch groups as a scoped admin. Find complete guidance in How to configure RBAC for Windows Autopatch.

Windows updates released on or after April 8, 2025, contain protections for a vulnerability with Kerberos authentication. These protections are deployed in phases. The next phase, Enforced by Default phase, begins July 8, 2025.

To learn more about these protections, please see Guidance for applying protections related to CVE-2025-26647.

The June 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

(Updated) Note: The June 2025 security update for devices running Windows 11, version 24H2 (KB5060842) was released and gradually rolled out June 10, 2025. However, we’ve identified a compatibility issue affecting a limited set of these devices in version 24H2, which instead will receive the Out-of-Band (OOB) update (KB5063060). The OOB update was released today, June 11, 2025. For more information, see June 11, 2025—KB5063060 (OS Build 26100.4351) Out-of-band - Microsoft Support.

Microsoft has identified an issue where the May 2025 Windows security update (KB5058405) might fail to install on some Windows 11, versions 22H2 and 23H2 devices, resulting in a recovery error (0xc0000098) related to the ACPI.sys file. This issue primarily affects virtual environments, including Azure Virtual Machines, Azure Virtual Desktop, and on-premises VMs hosted on Citrix or Hyper-V. Home users of Windows using Home or Pro editions are unlikely to be impacted.

We recommend using Azure Virtual Machine repair commands as a workaround for Azure customers who have already applied the May 2025 Windows security update and are experiencing this issue. For more details on this issue, see KB5058405 might fail to install with recovery error 0xc0000098 in ACPI.sys.

To address this issue, the out-of-band (OOB) update KB5062170 has been released today, May 31, 2025. This non-security OOB update is available exclusively via the Microsoft Update Catalog. If you have not yet deployed the May 2025 Windows security update (KB5058405) and your environment includes devices running in a virtual desktop infrastructure on Windows 11, versions 22H2 and 23H2, we recommend you apply the OOB update instead. This OOB update includes all improvements and fixes in the May 2025 Windows non-security preview update (KB5058502), in addition to this issue’s resolution.

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover enhancements to Windows App, administrator protection, Copilot on Windows, as well as multiple AI and productivity features. See how to get started with these and other improvements across Microsoft Intune, Windows Autopatch, and Windows Server.

Microsoft recommends disabling the Secure Time Seeding (STS) in Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025 due to reported timekeeping issues. Additionally, organizations should review and ensure proper time synchronization and monitoring on critical servers.   

 

Microsoft recommends applying this disablement as soon as possible. This recommendation applies to all existing deployments of Windows Server 2016 and later (including domain controllers and member servers). Disabling Secure Time Seeding (STS) may prevent potential timekeeping errors that could affect time-sensitive workloads, such as Active Directory Domain Services (ADDS) domain controllers, VM hosts, and servers using time for critical functionality. 

 

IT admins should review timekeeping requirements in their environments and then disable the STS feature by modifying registry or Group Policy settings and rebooting the affected machines. See Secure Time Seeding recommendations for Windows Server for steps on how to disable STS in Windows Server. For additional information, check Secure Time Seeding – improving time keeping in Windows and Secure Time Seeding recommendations for Windows Server.

The May 2025 non-security preview update is now available for Windows 11, version 24H2 and Windows 10, version 22H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available.

Updated May 27, 2025: This message was updated to include additional versions of Windows affected by this issue.

Microsoft has identified an issue where certain confidential virtual machines running on Hyper-V might intermittently stop responding or restart unexpectedly, affecting service availability and requiring manual intervention. This issue primarily affects Azure confidential VMs and is not expected to impact standard in-market Hyper-V deployments, except in rare cases involving preview or pre-production configurations.

To address this issue, out-of-band (OOB) updates have been released, May 23, 2025 for Windows Server 2022 (KB5061906) and today, May 27, 2025 for additional versions of Windows affected by this issue. This update is available exclusively via the Microsoft Update Catalog. For more information and installation instructions, refer to the appropriate KB article for your Windows version. If your organization is not affected by this issue, you do not need to install this OOB update.

If you have not yet deployed the May 2025 Windows security update and your IT environment includes devices running Hyper-V on the versions of Windows listed below, we recommend you apply this OOB update instead:

If part of your job is helping your organization transition to Windows 11, consider the limited public preview of Windows Backup for Organizations. You can back up your organization’s Windows 10 or Windows 11 settings and restore them on a Microsoft Entra joined device. This capability helps reduce migration overhead, minimize user disruption, and strengthen device resilience against incidents. Nominate your organization for this preview as you prepare for the upcoming Windows 10 end of support date on October 14, 2025. Learn more at Announcing Windows Backup for Organizations.

The May 2025 non-security preview update is now available for Windows 11, versions 23H2 and 22H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

Microsoft has identified a known issue affecting a small number of Windows 10 devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors. After installing the May 13, 2025, Windows security update (KB5058379), these systems might experience unexpected termination of lsass.exe, which triggers Automatic Repair. On devices with BitLocker enabled, this results in a prompt for the BitLocker recovery key to proceed.

To address this issue, an out-of-band (OOB) update has been released today, May 19, 2025 (KB5061768). This update is available exclusively via the Microsoft Update Catalog and is cumulative—no previous updates are required before installing it. It supersedes all prior updates. The OOB update is available only for the Windows versions affected by issue: Windows 10, version 22H2, Windows 10 Enterprise LTSC 2021, and Windows 10 IoT Enterprise LTSC 2021.

Important: Consumer devices running Home and Pro editions of Windows 10 are unlikely to be affected, as they typically do not use Intel vPro processors.

If you have not yet deployed the May 2025 Windows security update (KB5058379) and your IT environment includes devices with the affected processors, we recommend applying this OOB update instead: May 19, 2025—KB5061768 (OS Builds 19044.5856 and 19045.5856) Out-of-band. If your organization is not affected by this issue, you do not need to install this OOB update.

Start detecting Visual Basic Scripting Edition (VBScript) across your organization in preparation for the next deprecation phase. See how to use System Monitor (Sysmon), review VBScript dependencies, or scan for .vbs files and custom MSI packages. Once detected, you should proactively migrate away from VBScript. Now that VBScript is enabled by default on Windows 11, version 24H2 and later, you can also proactively disable it in preparation for the next deprecation phase. Find step-by-step instructions, tips, and considerations in VBScript deprecation: Detection strategies for Windows.

Have you prepared your organizational devices for the May 2025 hotpatch update? Hotpatching offers faster compliance for devices running Windows 11 Enterprise or Education, version 24H2. Find answers to any questions you may have in the following categories: 

Read today’s article, Hotpatch for client: Frequently asked questions.

The May 2025 security update is now available for all supported versions of Windows. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.

  

Short on time? Watch our Windows 11 release notes video for this month's tips.

If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live chat-based event on the Tech Community called Windows Office Hours. Members of the Windows, Microsoft Intune, Windows Autopilot, Windows Autopatch, and Windows 365 engineering teams will be standing by to answer your questions. We also have experts from FastTrack, the Customer Acceleration Team, and Microsoft public sector teams. 

Want to attend the May 15 session of Office Hours? Add it to your calendar and select Attend on the event page to let us know you’re coming. There is no video or live meeting component. Simply visit the event page, log in to the Tech Community, and leave your questions in the Comments section. You can also bookmark https://aka.ms/Windows/OfficeHours for upcoming dates (and the ability to add this event to your calendar). We look forward to helping you.

Do you have questions about hotpatch updates? The first Windows 11 hotpatch update since general availability is coming to enterprises in the second week of May 2025. Here is a list of recently published resources to help you get started and make the most of this feature.

Note: A hotpatch calendar is now also incorporated into the Windows Server release information. 

To receive the May 2025 hotpatch update, enroll your devices into hotpatching and update them with the April 2025 baseline update. 

If you’re an IT professional or decision maker, start using the newest Windows 11 capabilities with helpful tips and actionable steps summarized in one place. Discover hotpatch updates for Windows client, controls and policies to manage new AI features on Copilot+ PCs, public preview of Zero Trust DNS, and more. See how to get started with these and other enhancements across Windows 365, Microsoft Intune, Windows Autopatch, and Windows Server.

Windows has always been the place where computing innovation happens first. This was the case when we introduced Copilot+ PCs last May – the fastest, most intelligent, and most secure Windows PCs ever built. The innovation continues today with the general availability (GA) of exclusive AI experiences like Recall (preview), Click to Do (preview) and improved Windows search across Copilot+ PCs.*

Copilot+ PCs have blazed a trail in personal computing, redefining what it means to be a premium PC with unparalleled features, performance and security out of the box. Now, with the availability of Recall, improved Windows search, and Click to Do, we’re adding even more AI benefits, making it easier to pick up where you left off, find what you’re looking for and do more with less time and hassle.

At a time when many are talking about the benefits of AI, we are excited to be delivering them on Copilot+ PCs. To learn more about the exclusive Copilot+ PC features available starting today, see the blog post Copilot+ PCs are the most performant Windows PCs ever built, now with more AI features that empower you every day.

IT management controls and policies are now available with the new AI features on Copilot+ PCs. Install the April 2025 Windows non-security update on eligible Copilot+ PCs to get access to Recall (preview), Click to Do (preview), and improved Windows search. Learn more about these new AI features and how to manage them with built-in controls and policies.  

The April 2025 non-security preview update is now available for Windows 11, version 24H2. For instructions on how to install this update on your home device, check the Update Windows article. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. To be informed about the latest updates and releases, follow us on X @WindowsUpdate.