Microsoft has officially confirmed that Windows 11 version 26H2 will be the next major feature update for Windows 11, and has shared details on the upgrade mechanism. Devices currently running Windows 11 24H2 or 25H2 will be able to transition to 26H2 using a small enablement package — a much lighter process than a full operating system reinstall.
Upgrade Path Details
The enablement package model allows Microsoft to pre-stage the 26H2 update bits on devices ahead of the official rollout. When the feature update is ready to activate, a small package simply "enables" the pre-staged components without downloading a multi-gigabyte update at that moment. This approach:
- Reduces update download size at rollout time for devices that received the staged content
- Shortens the active update window, minimizing disruption to end users
- Maintains compatibility with the existing 24H2/25H2 baseline, as 26H2 builds on the same foundation
This is consistent with Microsoft's approach used in previous H2 releases, which aimed to reduce the friction historically associated with annual Windows feature updates.
What's Coming in 26H2
While Microsoft has not disclosed the full feature list for 26H2, the update is expected to include:
- Continued Copilot+ AI feature expansion across Recall, Click to Do, and live captions
- Additional Windows Hello and Passkeys integration enhancements
- Security baseline updates aligning with the latest NIST and CISA guidance
- Improvements to Windows Defender and Credential Guard policies
- Updated kernel security mitigations for newly disclosed hardware vulnerabilities
Security Relevance
From a security operations perspective, Windows 11 26H2 is significant beyond features. Microsoft typically bundles:
- Expanded Secure Boot controls and kernel-mode driver signing enforcement changes
- Updated security baselines for enterprise Group Policy configurations
- Deprecation of legacy protocols — older authentication protocols and network features that represent attack surface continue to be phased out in each release
- Memory isolation improvements to harden against kernel exploits
IT and security teams should begin planning their 26H2 compatibility testing now to avoid delays when the update becomes available through Windows Update for Business and WSUS/Intune managed channels.
Organizational Preparation
For enterprise environments, the 26H2 announcement triggers several planning tasks:
- Compatibility testing — validate line-of-business applications against pre-release 26H2 builds via the Windows Insider Program (Release Preview channel)
- Update ring planning — define which device populations receive 26H2 in the first wave versus deferred rings
- Security baseline review — download and compare the Microsoft Security Compliance Toolkit baselines for 26H2 when published
- Driver and firmware audit — ensure device drivers are current before feature update deployment, as outdated drivers are the most common source of post-update issues
- Intune/WSUS policy review — update feature update deferral policies to align with your 26H2 deployment timeline
Timeline
Microsoft has not confirmed an exact release date for Windows 11 26H2 beyond "coming soon." Based on historical patterns, H2 releases typically arrive in the September–October timeframe. Organizations should watch the Windows release health dashboard and Windows IT Pro blog for official availability announcements.