Windows 11 23H2 Enterprise and Education end of support: November 10, 2026
The November 2026 security update is the last for Windows 11 version 23H2 Enterprise, Education and IoT Enterprise. What changes on November 10 and how to move to 25H2 or 26H2.
Windows 11, version 23H2 reaches end of support for its Enterprise, Education, Enterprise multi-session and IoT Enterprise editions on Tuesday, November 10, 2026. Microsoft says the November 2026 security update, due that day, is the last update these editions will get. Home and Pro editions of 23H2 lost support on November 11, 2025, so this date retires the last 23H2 editions still being serviced.
The dates come from Microsoft's Windows 11 release information page and its lifecycle listings for Enterprise and Education, and for IoT Enterprise. Microsoft also posted 90-, 60- and 30-day reminders in the Windows message center on August 12, September 15 and October 9, 2026.
Which Windows 11 23H2 editions are affected
- Ending November 10, 2026: Enterprise, Education, Enterprise multi-session and IoT Enterprise. These editions get 36 months of updates, and 23H2 was released on October 31, 2023.
- Already ended on November 11, 2025: Home, Pro, Pro Education, Pro for Workstations and SE.
To check a PC, run winver: version 23H2 reports OS build 22631. Our Windows 11 version history lists every version with its build number and support dates.
What changes after November 10
Microsoft's release cycle documentation says the monthly security update typically goes out on the second Tuesday at 10:00 a.m. Pacific time. On November 10 that is 10:00 a.m. PST, 1:00 p.m. EST and 18:00 UTC. After that release, 23H2 devices get no further security updates, so flaws patched in later months stay open on them. On the same schedule, the next release falls on December 8, 2026, and it will not cover 23H2.
The PCs keep running. Microsoft's lifecycle FAQ notes that unsupported Windows gets no technical assistance, software updates or security fixes, and that new software and hardware become less likely to perform well on it. The 23H2 release health page, which tracks known issues, is scheduled to be retired on December 10, 2026.
Upgrade 23H2 to 25H2 or 26H2
- Version 25H2 (released September 30, 2025): Enterprise and Education support until October 10, 2028. Microsoft's 90- and 60-day reminders named it as the upgrade target.
- Version 26H2 (released September 29, 2026): Enterprise and Education support until October 9, 2029, the longest of the three. Microsoft's 26H2 status page, updated October 28, 2026, says it is available for all eligible devices.
- Version 24H2: Enterprise and Education support until October 12, 2027, less than a year after the 23H2 cut-off.
Expect a full upgrade from 23H2 rather than a quick switch. Microsoft's 24H2 documentation calls that release a "full OS swap" rather than an enablement package, and 25H2 and 26H2 share its servicing branch. According to Microsoft's 26H2 notes, the 26H2 enablement package, which usually needs a single restart, is meant for PCs already on 24H2 or 25H2. Its announcement describes the offer for those devices and does not mention 23H2, so check which version your update tool actually offers.
On a single PC, open Settings > Windows Update, select Check for updates and choose Download and install when a newer version appears. Microsoft can hold back the offer on devices with a known compatibility issue, which it calls a safeguard hold.
Notes for Intune, Group Policy and WSUS admins
- Intune: feature update policies move devices to a chosen Windows release and stop them from going beyond it. They require Microsoft Intune Plan 1 and a Windows license with the Windows Autopatch entitlement. Microsoft advises setting the feature update deferral in update rings to 0 days so the rings do not delay the policy.
- Group Policy and MDM: the "Select the target Feature Update version" policy (ProductVersion and TargetReleaseVersion in the Update CSP) keeps devices on the named version until it reaches end of service or the policy changes. Devices still pinned to 23H2 need a new value, such as 25H2 or 26H2.
- WSUS and Configuration Manager: Microsoft's 25H2 documentation lists WSUS (including Configuration Manager), Windows Update client policies and the Microsoft 365 admin center as delivery channels. Its 26H2 announcement names Windows Autopatch and the Microsoft 365 admin center.
- Scripts: the 26H2 notes say the WMIC command-line tool is removed from 24H2 and later and is no longer available as a Feature on Demand, so scripts that call it need replacing before the upgrade.
What else reaches end of support on November 10
- .NET 8 (LTS) and .NET 9 (STS), according to the .NET support policy.
- PowerShell 7.4 (LTS) and PowerShell 7.5, which follow the .NET lifecycle, per the PowerShell support lifecycle.
- The Azure Functions in-process model and Azure IoT Edge 1.5 LTS.
We follow these deadlines in our Developers and Software sections. The previous Windows cut-off, for 24H2 Home and Pro, is covered in our October 13 report.
Frequently asked questions
What is the Windows 11 23H2 end-of-life date?
November 10, 2026 for Enterprise, Education, Enterprise multi-session and IoT Enterprise. Home and Pro editions reached end of updates on November 11, 2025.
Will 23H2 PCs stop working after November 10, 2026?
No. They keep running, but Microsoft stops releasing security updates for them.
Can 23H2 upgrade directly to 25H2?
Yes, and Microsoft's 90- and 60-day reminders recommended that path. Microsoft's 24H2 documentation describes that release as a full OS swap rather than an enablement package, so expect a full feature update from 23H2. Moving to 25H2 extends Enterprise and Education support to October 10, 2028.