Join us December 10, 2025, at 8:00 AM PST for a live Ask Microsoft Anything (AMA) session focused on updating Secure Boot certificates on your Windows devices before they expire in June 2026. This event gives IT admins the chance to ask questions and get expert guidance on Secure Boot configuration, update scenarios, inventorying and preparing your environment, and formulating the right deployment plan for your organization. Members of the Windows team will be available to answer your questions, share tips, and provide insights to help you prepare devices for Secure Boot certificate deployment. Visit the AMA: Secure Boot event page, log in to Tech Community, and post your questions in advance or during the live broadcast in the comments section. Save the date and start posting your questions early.
A new Windows Autopatch report empowers your organization to prioritize update deployment, demonstrate compliance, and maintain a robust security posture. The Common Vulnerabilities and Exposures (CVEs) report joins your other Windows quality update reports right in the Microsoft Intune admin center. Use it to view Windows CVEs addressed by recent quality updates and follow links to remediation documentation and device-level vulnerability status. When will this happen: The new report is already available. How this will affect your organization: This report can help simplify how you track which vulnerabilities have been remediated and which devices remain at risk. It can also help strengthen your vulnerability response strategy by identifying and linking to specific Windows updates that address each vulnerability. What you need to do to prepare: Read Additional information to learn how to
Introduction As part of Microsoft’s Secure Future Initiative, we’re updating our Content Security Policy for the Microsoft Entra ID sign-in experience. This change adds an extra layer of protection by allowing only scripts from trusted Microsoft domains to run during authentication, blocking unauthorized or injected external code. This proactive measure helps safeguard users against threats like cross-site scripting (XSS), further strengthening security for your organization. When this will happen General Availability (Production/Worldwide only): Rollout begins mid-October 2026 Expected completion by late October 2026 Periodic communications will be sent closer to release. How this affects your organization Who is affected: Organizations using browser-based sign-in experiences on URLs starting with login.microsoftonline.com. No impact to Microsoft Entra External ID tenants. What will hap
November’s edition of Windows news you can use recaps the new Windows capabilities announced at Microsoft Ignite so your organization and IT team can catch up and dive deeper into the details. Discover upcoming events to help you keep your deployment and device management projects moving. Find a summary of important lifecycle reminders for Windows 10, Windows 11, Windows Server, and Microsoft Configuration Manager. Learn about new tools and guidance. When will this happen:Some of the features described in this monthly recap are now available, either broadly or in public preview. Others are planned for 2026. Note that some capabilities roll out gradually and may not yet be available for your market. What you need to do to prepare:Read the November 2025 edition of Windows news you can use so you can plan for these new capabilities and utilize them in your organization as they are released.
The November 2025 non-security preview update is now available for Windows 11, versions 25H2 and 24H2. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available. Highlights for the Windows 11, version 25H2 update: The search results menu displays more available results, making it easier to quickly find and modify your settings. A scroll bar lets you view all search results.* You can use Windows Studio Effects, which provides AI-powered camera enhancements, on an additional came
In 2018, we announced that we were no longer making feature updates to Exchange Web Services (EWS) in Exchange Online, and we advised developers to move to Microsoft Graph. In September 2023, we announced that on October 1, 2026, we will start blocking EWS requests to Exchange Online. We are now less than 12 months from October 1, 2026. We have made progress on closing most parity gaps with more changes in development to be released in the coming quarters. Please refer to Deprecation of Exchange Web Services in Exchange Online for up-to-date guidance and roadmap information. You are receiving this notification because there are EWS applications in your tenant. If you haven't already, start the process of working with your application development organization and your application vendors to either sunset or migrate active EWS applications on your tenant to the Graph API, Power Platform, o
On December 2, Tech Community Live presents three hours of live, Windows-focused Ask Microsoft Anything (AMA) sessions. This is a free online event. Members of the Windows engineering team will be answering questions, offering tips, and providing additional insights on the announcements made at Microsoft Ignite. Topics will include: managing Windows updates, managing AI and agents in Windows, Windows backup and restore options, and Windows accessibility in the enterprise. When will this happen:The live streams will begin at 8:00 AM PST (3:00 PM UTC) and conclude at 11:00 AM PST (6:00 PM UTC). All sessions will be recorded and available on demand. The ability to post questions on the Tech Community will be open until Friday, December 5. Closed captions will be AI-generated during the live event. Human-generated closed captions and text-based transcripts will be available later in the week
If you manage Windows Servers, plan for removal of Windows Internet Name Service (WINS). WINS was officially deprecated since Windows Server 2022 and will be removed from all Windows Server releases following Windows Server 2025. Standard support will continue through the lifecycle of Windows Server 2025, until November 2034. We encourage you to migrate to modern Domain Name System (DNS)-based name resolution solutions before then. When will this happen: WINS deprecation was announced in Windows Server 2022. Deprecation means the feature remains supported and maintained, but there is no further active development or new functionality planned. November 2034 is the end of the lifecycle for Windows Server 2025, which also marks the end of support for WINS. How this will affect your organization: Once removal takes effect, the following components will no longer be part of Windows Server: WI
Microsoft has identified an issue affecting some organizations using hotpatch updates on devices running Windows 11 Enterprise, version 25H2. After installing the hotpatch update KB5068966 released November 11, 2025, affected devices repeatedly download and install the same update when a Windows Update scan is run. This behavior does not impact device functionality; only the update history will reflect the latest installation timestamp. An out-of-band (OOB) update was released today, November 20, 2025, to address this issue. This is a cumulative update, so you do not need to apply any previous updates before installing this update, as it supersedes all previous updates for affected versions. If you have not yet deployed the November 2025 hotpatch update (KB5068966) on Windows 11, version 25H2 devices in your environment, we recommend you apply this OOB update (KB5072753) instead.
The November 2025 non-security preview update is now available for all supported editions of Windows 11, version 23H2. The non-security preview update for Windows 11, versions 25H2 and 24H2 will be available soon. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 update history page. To learn more about the different types of monthly quality updates, see Windows monthly updates explained. Looking to explore upcoming features and improvements in Windows 11? Check out the Windows roadmap. It includes what’s coming to the Windows Insider Program, what’s gradually rolling out, and what’s generally available. Highlights for the Windows 11, version 23H2 update: This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. This update addresses an issue where File Exp
Introduction Starting October 2027 and ending November 2027, we will retire the isAttestationEnforced and keyRestrictionsproperties from the existingfido2AuthenticationMethodConfiguration API schema. This change aligns with the latest update to the passkey policy API schema, which introduces support for granular group-based configurations with passkey profiles. During the retirement period, isAttestationEnforced and keyRestrictions will remain in sync with their counterparts attestationEnforcement and keyRestrictions within the Default passkey profile. When this will happen Retirement begins in mid-October 2027 and is expected to complete by early November 2027. How this affects your organization: You are receiving this message because our reporting indicates your organization may be using this feature. Who is affected: Admins managing FIDO2 authentication configurations and any custom a
Windows is embedding intelligence into systems, silicon, and hardware so you can move from AI experimentation to execution at scale. Because every organization approaches AI differently, Windows gives you the choice and control to decide how agents fit into your workflow so when you use them, you can do so with confidence and transparency. Catch up on the Windows AI innovations we’re sharing at Microsoft Ignite and find out what they mean for your organization. When will this happen:This week at Microsoft Ignite, we announced:Windows security and resiliency innovations to help mitigate risk The ability to scale resiliency with new recovery tools Ways to improve your update experience with Windows Autopatch update readiness, quality update reports, and automatic or manual approvals for security, non-security, and out-of-band updates Sysmon functionality coming natively to Windows 11 and W