60-Day Reminder: Windows 11, version 23H2 Enterprise and Education editions reach end of updates on November 10, 2026

🚨 The Signal: Windows 11, version 23H2 Enterprise/Education editions reach end of security updates on November 10, 2026. Continued use after this date will expose devices to unpatched vulnerabilities, requiring an upgrade to version 25H2 for ongoing protection.

The Impact

Security teams and IT administrators are affected by the critical risk of unpatched operating systems.

  • Security Teams: Increased attack surface from unpatched OS vulnerabilities.
  • IT Administrators: Urgent need to plan and execute OS upgrades across the enterprise.
  • Organisational Leadership: Potential for compliance breaches and increased cyber risk.
  • End Users: No direct impact, but their devices become vulnerable if not updated.

The Action

  1. Identify all Windows 11, version 23H2 Enterprise and Education devices in your environment.
  2. Develop a phased plan for upgrading identified devices to Windows 11, version 25H2.
  3. Utilise Microsoft Intune or Configuration Manager to deploy Windows 11, version 25H2 updates.
  4. Verify successful upgrade and patch status of all target devices.
  5. Update internal patching policies and compliance reporting to reflect new lifecycle dates.

Domain: Intune · Impact: high · Workload: Other · Essential Eight: Patch Operating Systems · ISM: ISM-1407, ISM-1501, ISM-1621, ISM-1622, ISM-1623, ISM-1654, ISM-1655, ISM-1694, ISM-1695, ISM-1696, ISM-1701, ISM-1702, ISM-1877, ISM-1889, ISM-1902