11/15 when trying to determine if you should trust something you read online, what should you check?

The September 2022 preview release for Windows 11, version 22H2 – also referred to as the Windows 11 2022 Update – is now available. This release is designed only for devices already running the Windows 11 2022 Update and adds dynamic Widgets content to your taskbar with notification badging. It also addresses issues with Microsoft Store, adjusts daylight savings time in Chile, and reduces power consumption during Sleep mode for some devices. 

For information about the contents of this update, along with instructions on how to install this update, see the release notes which are accessible from the Windows 11 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

The latest version of Windows 11, 22H2 brings sizeable improvements to feature and quality updates. A new IT Pro Blog post presents some results of complex engineering and testing behind smaller, faster, more reliable, and simpler updates. While quite technical, this “every byte counts” story is meant for IT pros and decision makers whose organizations are the motivators and the beneficiaries of these multiple savings. Read Faster. Smaller. Windows 11, version 22H2 update fundamentals. 

The Windows 11 2022 Update is now available for eligible Windows 10 and Windows 11 devices. If you have an eligible device and are interested in experiencing the latest feature update, open Windows Update Settings and select Check for updates. For detailed guidance on how to get the 2022 Update and our gradual rollout approach, visit the Windows Experience Blog and watch this video.

If you are an IT administrator, see What's new for IT pros in Windows 11, version 22H2 for information on commercial release channels, deployment tools, and enhancements for commercial organizations.

The September 2022 non-security preview release, referred to as our "C" release, is now available for all supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 and Windows 10 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

As previously communicated, Microsoft has disabled Transport Layer Security (TLS) 1.0 and 1.1 by default for Internet Explorer and EdgeHTML starting today, September 20, 2022. This is the rendering engine for the WebView control.

Please note, Microsoft is not deprecating TLS 1.0 and TLS 1.1 support. It is being disabled by default, and organizations have the option to turn it back on through Group Policy if needed for compatibility reasons. Users have the option turn it back on for their personal devices by navigating to Tools > Internet Options > Advanced in Internet Explorer.

For more information, see Manage Transport Layer Security (TLS) 1.0 and 1.1 after default behavior change in September 20, 2022.

The September 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Improvements for the Windows 11 update: 

• Addresses security issues for your Windows operating system.  
• Addresses a known issue that affects Microsoft accounts (MSA). The web dialog that you use to sign in or sign out might not appear.

Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 update. 

Two file types are required for IT admins enrolled in the private preview of Unified Update Platform (UUP) for on-premises update management. Those using Windows Server Update Services (WSUS) must add .msu and .wim MIME file types to support the private preview capabilities. The new blog post outlines steps you can follow to add these file types manually or using PowerShell. If your organization is not yet enrolled in this private preview, consider joining it before you start getting Windows updates in a unified format through various channels. Learn more about the preview of UUP for on-premises update management in the Windows IT Pro Blog, at Preview Unified Update Platform for on-premises update management. For detailed information on the file type requirements for UUP, please see Adding file types for Unified Update Platform on premises.

Please take a moment and participate in this quick survey we’ve prepared as part of our continued effort to evolve the design and utility of the Windows release health hub. We greatly appreciate your feedback so we can focus on what matters most! Windows release health offers you official information on Windows releases and servicing milestones, known issues and safeguards, and helpful resources. This survey should only take about five minutes of your time to complete. Get started here.

Microsoft released KB5012170 on August 9, 2022, a standalone security update that provides support for Secure Boot Forbidden Signature Database (DBX). Windows 8.1 and newer clients and Windows Server 2012 and newer servers must install this update regardless of whether BitLocker is enabled or supported on these devices. When attempting to install the update, you might receive error “0x800f0922”. See the known issues section in KB5012170: Security update for Secure Boot DBX: August 9, 2022. Your device might start up in BitLocker recovery mode after the update is installed. If you encounter this situation, check the following articles for guidance: Some devices might start up into BitLocker Recovery and Finding your BitLocker recovery key in Windows.

The August 2022 non-security preview release, referred to as our "C" release, is now available for all supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 and Windows 10 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Leverage three existing resources to help you plan for, test, and validate Windows 11 in your environment. The Windows 11 and Office 365 Deployment Lab Kit contains a complete lab environment including evaluation versions of Windows 11 Enterprise, Windows Server 2022, and a collection of tools which allow you to test and conduct a proof of concept for Windows 11 deployment. The Windows 11 Onboarding Kit provides a collection of materials that you can use to help prepare your users and ensure that they get the most out of Windows 11. Finally, review the July blog post to experience Windows 11 improvements and productivity in an interactive and visual way. 

The August 2022 non-security preview release, referred to as our "C" release, is now available for Windows 11. The preview update for other supported versions of Windows 10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from Windows 11 history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• Addresses an issue related to USB printing that might cause your printer to malfunction after you restart it or reinstall it.
• Addresses an issue that prevents Windows 11 SE from trusting some Microsoft Store applications. This might prevent you from downloading the untrusted app.
• Addresses an issue that might cause certain Bluetooth audio headsets to stop playing after a progress bar adjustment.
• Addresses a known issue that causes Microsoft Edge to stop responding when you use IE mode. This issue also prevents you from interacting with a dialog.

The August 2022 non-security preview release, referred to as our "C" release, is now available for Windows 10, version 1809. The preview update for Windows 11 and other supported versions of Windows 10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Azure Workbooks for Update Compliance reporting is now available! Easily monitor Windows Updates and patch compliance with this public preview, before transitioning to it as a required solution later this year. Whether you are a generalist, an IT specialist, or a builder, the Update Compliance workbook template is here to make your job easier. See the new blog post to visualize the revamped user experience and Azure AD integration, as well as how to enable the public preview today. 

The August 2022 non-security preview release, referred to as our "C" release, is now available for Windows Server 2022. The preview update for Windows 11 and other supported versions of Windows10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows Server 2022 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Last updated: 8/19/22

Windows 11 is bringing you more live content on your taskbar. This change allows you to see live updates from other widgets such as sports, finance, and breaking news. Your taskbar should show weather most of the time, but when something important happens related to one of your other widgets you may see an announcement from that widget on your taskbar.

To get this updated feature, you should update the Windows Web Experience Pack from the Microsoft Store. This occurs automatically for most devices.

These announcements are meant to be quick and glanceable, and if you don’t interact with them, the taskbar will return to showing you the weather. Explore the changes in Stay up to date with widgets.

At this time, Widget notifications cannot be turned off. Microsoft is constantly listening and learning, and welcomes customer feedback that helps shape Windows.

Note: If you have the latest version of Windows but still don’t see all widgets features, it may be because some features are being rolled out over several weeks and aren't available to all customers at once.

Starting September 13, 2022, Microsoft will disable Transport Layer Security (TLS) 1.0 and 1.1 by default for Internet Explorer and EdgeHTML, the rendering engine for the WebView control. If you wish to disable TLS 1.0 and TLS 1.1 before that date, you might do so by using Group Policy. The Microsoft Edge Legacy desktop application is no longer in scope for this timeframe, as it reached end of support on March 9, 2021.

Note: Microsoft is not deprecating TLS 1.0 and TLS 1.1 support. We are disabling it by default, and your organization has the option to turn it back on through Group Policy (if needed, for compatibility reasons). Users have the option turn it back on for their personal devices by navigating to Tools > Internet Options > Advanced in Internet Explorer.

For more information, see Plan for change: TLS 1.0 and TLS 1.1 soon to be disabled by default.

The August 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• Addresses a known issue that might prevent some of you from opening the Start menu.
• Addresses security issues for your Windows operating system.  

Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 update.

Firmware on smartcard-authenticating printers and scanners must be compatible with section 3.2.1 of RFC 4556 in order to successfully authenticate with Active Directory domain controllers before installing the August 2022 security update. 

Windows Updates released on July 13, 2021 introduced protections for CVE-2021-33764 which required all devices with a key exchange during the PKINIT Kerberos authentication, including smartcard authenticating printers, to either support:

• Diffie-Hellman or,
• advertise support for the des-ede3-cbc ("triple DES) e-type during the Kerberos AS request.

Windows updates released between July 27, 2021, and July 26, 2022 supported temporary mitigation that allowed non-RFC compliant devices to authenticate with Active Directory. As of August 9, 2022, or later, Windows update removes all temporary mitigation released to Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.

See the complete guidance in KB5005408.

As of August 9, 2022, all editions of Windows Server, version 20H2 have reached end of servicing. The August 2022 security update, released August 9, 2022, is the last update available for this version. Devices running this version will no longer receive monthly security and quality updates containing protection from the latest security threats.

This is also the retirement of Windows Server Semi-Annual Channel (SAC). There will be no future SAC releases of Windows Server. Windows Server is moving to the Long-Term Servicing Channel (LTSC) as the primary release channel.

Customers using Windows Server SAC should move to Azure Stack HCI. Alternatively, customers may use the Long-Term Servicing Channel of Windows Server. For more information, see Windows Server Release Information.

The August 9th, 2022 security update makes improvements to Secure Boot DBX for the following supported versions of Windows: Windows Server 2012, Windows 8.1 and Windows Server 2012 R2, Windows 10, version 1507, Windows 10, version 1607 and Windows Server 2016, Windows 10, version 1809 and Windows Server 2019, Windows 10, version 20H2, Windows 10, version 21H1, Windows 10, version 21H2, Windows Server 2022, Windows 11, version 21H2 (original release), Azure Stack HCI, version 1809, and Azure Data Box, version 1809 (ASDB).

This security update addresses the vulnerability by adding the signatures of the known vulnerable UEFI modules to the DBX. For more information, see KB5012170: Security update for Secure Boot DBX: August 9, 2022.

Safeguard holds are one of several protection features of the Windows Update for Business deployment service. This feature is informed by partners, customers, and the latest Microsoft machine learning efforts to protect device populations not only from known issues, but also from likely issues. The new blog post offers a closeup look at what known issues and likely issues are, how the safeguard holds work behind the scenes, and how IT pros can enable and monitor safeguard holds. Learn more in Safeguard holds with the Windows Update for Business deployment service.

In 2021, Microsoft addressed a security vulnerability bypass Active Directory Domain Services Elevation of Privilege Vulnerability This bypass allows certain users to set arbitrary values on security-sensitive attributes of specific objects stored in Active Directory (AD). To exploit this vulnerability, a user must have sufficient privileges to create a computer account, such as a user granted CreateChild permissions for computer objects. That user could create a computer account using a Lightweight Directory Access Protocol (LDAP) Add call that allows overly permissive access to the securityDescriptor attribute. Additionally, creators and owners can modify security-sensitive attributes after creating an account.

Enforcement of new security requirements will be enabled by default in an upcoming update no sooner than April 11, 2023. Action may be required in order to prevent outages and system interruptions. For more information, see KB5008383: Active Directory permissions updates (CVE-2021-42291).

To enable efficiencies and help us implement our plan to store and process EU Data for European enterprise customers in the EU, we will be introducing a significant change for enterprise Windows devices that have diagnostic data turned on.

We’ll stop using policies, such as the “Allow commercial data pipeline” policy, to configure the processor option. Instead, we’ll be introducing an organization-wide configuration based on Azure Active Directory (Azure AD) to determine Microsoft’s role in the data processing. 

This change is releasing to Windows devices enrolled in the Dev Channel of the Windows Insider program the week of July 24, 2022. Any Windows build on or after 25169 will contain the changes. For other Windows devices (not in the Dev Channel), additional details on supported versions of Windows 11 and Windows 10 will be announced at a later date. These changes will roll out no earlier than the last quarter of the calendar year 2022.

For information on these changes and how to enable the Windows diagnostic data processor configuration option, refer to the Significant changes coming to the Windows diagnostic data processor configuration documentation topic.

The July 2022 non-security preview release, referred to as our "C" release, is now available for all supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

For instructions on how to install this update for your operating system, see the KB for your OS listed below:

• Windows 11, version 21H2 (original release): KB5015882
• Windows 10, version 21H2: KB5015878
• Windows 10, version 21H1: KB5015878
• Windows 10, version 20H2, Windows Server, version 20H2: KB5015878
• Windows 10, version 1809, Windows Server, version 1809, Windows Server 2019: KB5015880
• Windows Server 2022: KB5015879

Sign up for the private preview of the Unified Update Platform (UUP) for on-premises update management for commercial organizations. UUP on premises is an integration with Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager, and it will be generally available in early 2023. This new capability simplifies Windows content management and streamlines the process for upgrading to Windows 11 for those who manage Windows devices with these update management platforms. For further background and details on how to sign up for the private preview, see Preview Unified Update Platform for on-premises update management.

As previously announced, Microsoft released hardening changes for CVE-2021-33764 in Windows updates starting on July 13, 2021. When these updates are installed on a domain controller (DC), smart card (PIV) authentication might cause print and scan failures. A temporary mitigation, released in Windows Updates between July 29, 2021, and July 12, 2022, was made available for organizations that encountered this issue and couldn't bring devices into compliance as required for CVE-2021-33764.

Starting on July 21, 2022, this temporary mitigation will not be usable in security updates. The Windows July 2022 preview update will remove the temporary mitigation and will require compliant printing and scanning devices. To learn more, see KB5005408: Smart card authentication might cause print and scan failures.

On August 9, 2022, all editions of Windows Server, version 20H2 will reach end of servicing. The upcoming August 2022 security update, to be released on August 9, 2022, will be the last update available for this version. After that date, devices running this version will no longer receive monthly security and quality updates containing protection from the latest security threats.

This will also be the retirement of Windows Server Semi-Annual Channel (SAC). There will be no future SAC releases of Windows Server. Windows Server is moving to the Long-Term Servicing Channel (LTSC) as the primary release channel.

Customers using Windows Server SAC should move to Azure Stack HCI. Alternatively, customers may use the Long-Term Servicing Channel of Windows Server. For more information, see Windows Server Release Information.

The July 2022 non-security preview release, referred to as our "C" release, is now available for Windows Server 2022. The preview update for Windows 11 and other supported versions of Windows 10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows Server 2022 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

On July 13, 2021, Microsoft released hardening changes for Windows Key Distribution Center Information Disclosure Vulnerability, CVE-2021-33764. With these changes, smart card (PIV) authentication might cause print and scan failures when you install updates released on July 13, 2021, or later versions on a domain controller (DC). The affected devices are smart card authenticating printers, scanners, and multifunction devices that don’t support either Diffie-Hellman (DH) for key exchange during PKINIT Kerberos authentication or don’t advertise support for des-ede3-cbc ("triple DES”) during the Kerberos AS request.

A temporary mitigation, released in Windows Updates between July 29, 2021, and July 12, 2022, was made available for organizations that encountered this issue and couldn't bring devices into compliance as required for CVE-2021-33764. However, starting in July 2022, this temporary mitigation will not be usable in security updates. The Windows July 2022 preview update will remove the temporary mitigation and will require compliant printing and scanning devices. 

As of July 19, 2022, there will be no further fallback option in later updates, and all non-compliant devices must be identified using the audit events starting in January 2022 and updated or replaced by the mitigation removal. To learn more, see KB5005408: Smart card authentication might cause print and scan failures. 

The July 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• Addresses security issues for your Windows operating system.
• Addresses an issue that redirects the PowerShell command output so that transcript logs do not contain any output of the command. Consequently, the decrypted password is lost.

Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 update.

The June 2022 non-security preview release, referred to as our "C" release, is now available for Windows 11and all other supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer.

The June 2022 non-security preview release, referred to as our "C" release, is now available for Windows 11, Windows 10 version 1809. The preview update for other supported versions of Windows 10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• New! Introducing search highlights.
• Addresses an issue that causes certain games to stop working if they use certain audio technology to play sound effects
• Changes the name of the Your Phone app to Phone Link on the Settings page.
• Addresses an issue that causes the Microsoft Surface Dial customization settings page to stop working.

We’ll be introducing the search highlights feature to Windows 11 over the next several weeks. The search highlights feature presents notable and interesting moments of what’s special about each day, —like holidays, anniversaries, and other educational moments in time both globally and in your region. To see search highlights, click or tap on the search icon on your taskbar.

For enterprise customers, search highlights will also feature the latest updates from your organization and suggest people, files, and more.

For group configuration information, see Group configuration: search highlights in Windows.

Microsoft is releasing Out-of-band (OOB) security updates today, June 20, 2022, only for Arm-based Windows devices. This update addresses a known issue that only affects Windows Arm-based devices and might prevent you from signing in using Azure Active Directory (AAD). Apps and services that use AAD to sign in, such as VPN connections, Microsoft Teams, and Microsoft Outlook, might also be affected. 

Important This issue only affects Windows devices that use Arm processors. No other platforms will receive this out-of-band update. This OOB update is cumulative. We recommend that you install this OOB update instead of the June 14, 2022 security update for affected devices.

All updates listed below are available on Windows Update, Windows Update for Business, Windows Server Update Services (WSUS), and Microsoft Update Catalog. For instructions, see the release notes for your OS listed below.

• Windows 11, version 21H2: KB5016138
• Windows 10, version 21H2: KB5016139
• Windows 10, version 21H1: KB5016139
• Windows 10, version 20H2: KB5016139

As previously communicated, the Internet Explorer 11 (IE11) desktop application has retired and is out of support as of today, June 15, 2022. Following industry best practices, the IE11 desktop application will be progressively redirected to Microsoft Edge over the next few months and after will ultimately be permanently disabled via a future Windows Update, to help ensure a smooth retirement. 

If you have not set up IE mode in Microsoft Edge, we recommend doing so as soon as possible to help avoid business disruption. If you’ve already set up IE mode, follow these final steps. 

Note: The IE11 desktop application is not available on Windows 11. To continue using legacy IE-based sites and apps on Windows 11, IE mode in Microsoft Edge must be configured before deploying Windows 11.  

As previously announced, security requirements have increased for Windows devices that use the Distributed Component Object Model (DCOM) or Remote Procedure Call (RPC) server technologies. Windows update releases starting June 2021 address a vulnerability in the DCOM remote protocol by progressively increasing security hardening in DCOM. Starting today, June 14, 2022, all DCOM clients attempting to establish connections to DCOM servers which have applied updates released June 14, 2022, or later, must either support an authentication level of RPC_C_AUTHN_LEVEL_PKT_INTEGRITY and higher or temporarily disable that enforcement by using the RequireIntegrityActivationAuthenticationLevel registry key in the DCOM server.

Note: We recommend that you update your devices to the latest security update available to take advantage of the advanced protections from the latest security threats.

Refer to the below timeline to understand the progressive hardening coming to DCOM.

• June 8, 2021 security update: Hardening changes are disabled by default but with the ability to enable them using a registry key.
• June 14, 2022 security update: Hardening changes are enabled by default but with the ability to disable them using a registry key.
• March 14, 2023 security update: Hardening changes are enabled by default with no ability to disable them. By this point, you must resolve any compatibility issues with the hardening changes and applications in your environment.

We recommend that IT administrators conduct testing by enabling hardening changes as soon as possible to confirm normal operations. To learn more, see KB5004442: Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414)

The June 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• Addresses security issues for your Windows operating system.
• This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. 

Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 update.

Two new reports are now in public preview to assess app and driver compatibility for feature updates and Windows 11. Beginning June 8, 2022, eligible Microsoft Endpoint Manager users can proactively utilize the Windows feature update device readiness report and the Windows feature update compatibility risks report. Leverage these additional insights to proactively prepare for a Windows upgrade or update. The blog post, Preview app and driver compatibility insights in Endpoint Manager, offers a closer look at these reports, details on prerequisites, and relevant updates.

Windows 11, version 22H2 is now available for commercial organizations to validate prior to its release later this year. Organizations enrolled in the Windows Insider Program for Business can access these builds through all standard channels, including Windows Update, Windows Update for Business, Windows Server Update Services (WSUS), Windows Insider Preview Downloads page, and Azure Marketplace. Along with commercial pre-release availability, learn about free support offerings in the new blog Preview of Windows 11, version 22H2 now available and follow the Windows Insider Blog for further updates.

The May 2022 non-security preview release, referred to as our "C" release, is now available for Windows 11and all other supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer.

There are several different ways for you to evaluate updates before deploying them to your entire device population. Check out the new post on Ensuring a successful Windows quality update experiencefor a comprehensive collection of favorites from the Windows Servicing and Delivery team at Microsoft. It covers the strategies and opportunities to test updates early, venues to stay informed on the latest updates and issues, and tried and proven ways for you to share ideas and provide feedback. Bookmark the tools that are most relevant to your organization and partner with us through a variety of interactive opportunities.  

The May 2022 non-security preview release, referred to as our "C" release, is now available for Windows 11, Windows 10 version 1809, and Windows Server 2022. The preview update for other supported versions of Windows 10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11, Windows 10, and Windows Server 2022 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer.

Highlights for the Windows 11 update:

• Improves the Family Safety verification experience for a child account when you send a request for additional screen time.
• Addresses an issue that fails to maintain the display brightness after you change the display mode.
• Addresses an issue that affects the IE mode window frame.
• Addresses an issue that prevents internet shortcuts from updating.
• Addresses an issue that causes an Input Method Editor (IME) to discard a character if you enter the character while the IME is converting previous text

As was previously announced, the United States Federal PKI team formally requested the removal of the "Federal Common Policy" root certificate, also known as the "G1" root certificate, from the Microsoft Trusted Root Program. Beginning, May 24, 2022, the "G1" root certificate is being removed by an out-of-band update. Environments which use the "G1" certificate must replace it with the "G2" certificate in order to prevent issues with important scenarios including SSL connections, VPN connections, and secure internet Mail Extensions (S/MIME). For details on the changes taking place along with detailed migration instructions, see Removal of the U.S. Federal Common Policy CA certificate from the Microsoft trusted root, and Migrate to the Federal Common Policy CA G2.

Microsoft is releasing Out-of-band updates today, May 19, 2022, for some versions of Windows. This update addresses a known issue that might cause authentication failures for some services and an issue that might cause Microsoft Store app installation issues.

All versions are available only on the Microsoft Update Catalog and will not be offered through Windows Update. For instructions, see the release notes for your OS listed below.

Cumulative updates:

• Windows Server 2022: KB5015013
• Windows Server, version 20H2: KB5015020
• Windows Server 2019: KB5015018
• Windows Server 2016: KB5015019

Note: You do not need to apply any previous update before installing these cumulative updates.

Standalone Updates:

• Windows Server 2012 R2: KB5014986
• Windows Server 2012: KB5014991
• Windows Server 2008 R2 SP1: KB5014987
• Windows Server 2008 SP2: KB5014990

Note: If you are using security only updates for these versions of Windows Server, you only need to install these standalone updates for the month of May 2022. Security only updates are not cumulative, and you will also need to install all previous Security only updates to be fully up to date. Monthly rollup updates are cumulative and include security and all quality updates. If you are using Monthly rollup updates, you will need to install both the standalone updates listed above to resolve this issue, and install the Monthly rollups released May 10, 2022 to receive the quality updates for May 2022.

Do you use the Windows 11 and Windows 10 release notes? Would you like to help us shape the next generation of our update documentation experiences? If so, we would like to hear from you. We have created an anonymous survey for you to share your feedback. Visit https://aka.ms/Windows/RelNotesSurvey and help us invest in the improvements that matter most to you!

Updated May 20, 2022:  The issue related to Microsoft Evaluation Center availability has been resolved. Please visit www.microsoft.com/EvalCenter to access trials and evaluations for Windows client, Windows Server, and other Microsoft products and kits.

The Microsoft Evaluation Center enables organizations, and the IT professionals that support them, to download evaluation versions of Microsoft products. This experience is currently unavailable and work is underway to restore it. In the meantime, we have published an article with links to download the evaluation software for Windows 11, Windows 10, Windows Server 2022, Windows Server 2019, and related kits. See Accessing trials and kits for Windows for more details.

The May 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check the Update Windows article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• Addresses a known issue that might cause issues for some .NET Framework 3.5 apps or prevent those apps from opening. The affected apps use certain optional components in .NET Framework 3.5, such as Windows Communication Foundation (WCF) and Windows Workflow (WWF) components.
• This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.

Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 updates.

As of May 10, 2022, theHome and Pro editions ofWindows 10, version 20H2, and all editions of Windows 10, version 1909 have reached end of servicing. The May 2022 security update, released on May 10, is the last update available for these versions. After that date, devices running these editions will no longer receive monthly security and quality updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update.

For more information on end of servicing dates for currently supported versions of Windows 11 and Windows 10, see the Windows 10 Home and Pro Lifecycle page, Windows 10 Enterprise and Education Lifecycle page, and the Windows lifecycle FAQ.

Internet Explorer mode (IE mode) provides legacy browser support within Microsoft Edge. Because of this, the IE11 desktop application will be retired on June 15, 2022, on certain versions of Windows 10. This means that the IE11 desktop application will no longer be supported and will be progressively redirected to Microsoft Edge over the following months, and ultimately disabled via Windows Update.

Note: The IE11 desktop application is not available on Windows 11. To continue using legacy IE-based sites and apps on Windows 11, IE mode in Microsoft Edge must be configured before deploying Windows 11.

To prepare for Internet Explorer disablement and re-direction, we recommend that you retire IE before June 15, 2022, following the steps in Don’t wait for June 15th! Set your own IE retirement date.

The Microsoft Root Certificate Program supports the distribution of root certificates, enabling customers to trust Windows products. As previously announced, the United States Federal PKI team formally requested the removal of the "Federal Common Policy" root certificate, also known as the "G1" root certificate, from the Microsoft Trusted Root Program.

On May 24, the "G1" root certificate is being removed by an out-of-band update. It's important that system administrators implement the "G2" root certificate, which replaces the "G1" certificate, before this date. Applications and operations which depend on the "G1" root certificate will fail after the retirement of the certificate on this date. 

For details on the changes taking place and detailed migration instructions, see Removal of the U.S. Federal Common Policy CA certificate from the Microsoft trusted root.

As previously announced, security requirements will be increasing later this year for Windows devices which use the Distributed Component Object Model (DCOM) or Remote Procedure Call (RPC) server technologies. Windows updates released starting September 2021 address a vulnerability in the DCOM remote protocol by progressively increasing security hardening in DCOM throughout 2022. This is a second reminder that some server environments might require action before June 14, 2022, to ensure normal operations.

Refer to the below timeline to understand the progressive hardening coming to DCOM.

• June 8, 2021: Hardening changes disabled by default but with the ability to enable them using a registry key.
• June 14, 2022: Hardening changes enabled by default but with the ability to disable them using a registry key.
• March 14, 2023: Hardening changes enabled by default with no ability to disable them. By this point, you must resolve any compatibility issues with the hardening changes and applications in your environment.

We recommended that IT administrators conduct testing by manually enabling hardening changes as soon as possible to confirm normal operations. To learn more, see KB5004442: Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414)

Current or new Update Compliance users: beginning October 15, 2022, your devices will need to be Azure AD joined (or hybrid Azure AD joined) to be included in Update Compliance reporting. To ensure continuity, we recommend that you start planning for this change by moving the remaining on-premises Active Directory devices to Azure AD or hybrid Azure AD join. For more information on these updated requirements, including steps to enroll in Update Compliance, see Azure AD required for Update Compliance after October 15, 2022.  

One year ago, we integrated Windows release health into the Microsoft 365 admin center, giving IT administrators the ability to find additional insights on known issues and view Windows-related notifications in the message center. In addition to setting up email notifications, IT admins can now leverage the service communications API in Microsoft Graph and enable custom workflows to review, assign, and triage communications about Windows from the message center. If you are an IT administrator, we encourage you to learn more about these new capabilities and how to customize your email preferences by visiting the Windows IT Pro Blog. 

Windows 11 is bringing you more dynamic content in an upcoming change, which will combine personalized widgets and news into the Widgets board. This change focuses on making widgets discoverable from the feed and helping you stay on top of what’s important with content from your favorite apps and services.

To get this updated feature, you should update the Windows Web Experience Pack from the Microsoft Store. This occurs automatically for most devices.

If you’ve already customized your Widgets board, all your pinned widgets will be exactly where you’d expect them to be. Existing customizations won’t be lost. Explore the new changes and how to try this experience inStay up to date with widgets.

Note: If you have the latest version of Windows but still don’t see all widgets features, it may be because some features are being rolled out over several weeks and aren't available to all customers at once.

The April 2022 non-security preview release, referred to as our "C" release, is now available for Windows 11 and all other supported versions of Windows. Information about the contents of this update is available from the release notes, which are accessible from the Windows 11 and Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• Updates an issue that delays OS startup by approximately 40 minutes.
• Updates an issue that incorrectly aligns video subtitles.
• Displays the temperature on top of the weather icon on the taskbar. 
• Updates an issue that prevents you from using the minimize, maximize, and close buttons on a maximized app window.

The April 2022 non-security preview release, referred to as our "C" release, is now available for Windows 10, version 1809. The preview update for Windows 11 and other supported versions of Windows 10 will be available in the near term. Information about the contents of this update is available from the release notes, which are accessible from the Windows 10 update history pages. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

The April 2022 security update release, referred to as our "B" release, is now available for Windows 11 and all supported versions of Windows 10. We recommend that you install these updates promptly. For more information about the contents of this update, see the release notes, which are easily accessible from the Windows 11 and Windows 10 update history pages. For instructions on how to install this update on your home device, check this article. To learn more about the different types of monthly quality updates, see our Windows quality updates primer. To be informed about the latest updates and releases, follow us on Twitter @WindowsUpdate.

Highlights for the Windows 11 update:

• This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.
• This update contains miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release.

Short on time? Watch our short monthly release notes video for a summary of this month’s Windows 11 updates.

On May 10, 2022, the Home and Pro editions ofWindows 10, version 20H2, and all editions of Windows 10, version 1909 will reach end of servicing. The May 2022 security update, released on May 10, is the last update available for these versions. After that date, devices running these editions will no longer receive monthly security and quality updates containing protections from the latest security threats.

To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 home and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health. For these devices, you will be able to choose a convenient time for your device to restart and complete the update.

As always, we recommend that you update your devices to the latest version of Windows 10, or upgrade eligible devices to Windows 11. For more information on end of servicing dates for currently supported versions of Windows 10, see the Windows 10 Home and Pro Lifecycle page, Windows 10 Enterprise and Education Lifecycle page, and Microsoft Lifecycle Policy search tool.

Windows 11 will soon enable you to have an update experience more tailored to your organization and a more user-friendly experience. As part of Windows Insider Preview Build 21277 or later, you can take advantage of new capabilities in the native Windows Update experience and leverage the native update experience with Microsoft Endpoint Configuration Manager. Whichever manager you use, on-premises or on the cloud, learn how to test out the upcoming Seamless update experience for organizations on Windows 11. 

In 2021, CVE-2021-26414 was created to track a security vulnerability discovered in the Windows Distributed Component Object Model (DCOM) Remote Protocol. The Windows updates that were released in September 2021 and later address this vulnerability by including changes that will progressively increase security hardening in DCOM. We recommended that you verify if client or server applications that use DCOM or RPC work as expected with the hardening changes enabled. Some configurations might require action by June 14, 2022, to ensure normal operations.

Refer to the below timeline to understand the progressive hardening coming to DCOM in 2022.

• June 8, 2021: Hardening changes disabled by default but with the ability to enable them using a registry key.
• June 14, 2022: Hardening changes enabled by default but with the ability to disable them using a registry key.
• March 14, 2023: Hardening changes enabled by default with no ability to disable them. By this point, you must resolve any compatibility issues with the hardening changes and applications in your environment.

We recommended that IT administrators conduct testing by manually enabling hardening changes as soon as possible to confirm normal operations. To learn more, see KB5004442: Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414)

Yesterday, Chairman and CEO Satya Nadella, and Windows Executive VP and Chief Product Officer Panos Panay—along with makers from the Windows engineering teams—revealed new and upcoming features in Windows that will help your organization (and IT team) support hybrid work across efficiently and securely. If you have questions about these capabilities—or about deploying, securing, and managing Windows in general—join us tomorrow, April 7th, for Tech Community Live! We're offering three Ask Microsoft Anything (AMA) sessions on productivity and collaboration, security, and management, each accompanied by a live stream panel of engineering and product experts. 

Can't attend live? Post your questions now in the Comments section of the AMA pages then check back after the event. We'll also publish a Q&A summary after the event for easy reference.

On April 26, 2022, the .NET Framework 4.5.2, 4.6, and 4.6.1 will reach end of support, and after this date, Microsoft will no longer provide updates including security fixes and technical support for these versions. There is no change to the support timelines for any other .NET Framework version. If you are using .NET Framework 4.5.2, 4.6, or 4.6.1, you will need to upgrade to a later version to stay supported. 

Microsoft is making this change because the .NET Framework was previously digitally signed using certificates that use the Secure Hash Algorithm 1 (SHA-1), and we are prioritizing support to newer digital certificates. To learn more, see the blog post .NET Framework 4.5.2, 4.6, and 4.6.1 will reach End of Support on Apr 26, 2022.

Different devices in different industries have unique characteristics and needs. Whether you manage an array of single-user devices, multi-user devices, education devices, kiosks and billboards, factory machines, or Microsoft Teams Room devices, this easy how-to guide is your go-to reference for setting Windows Update policies that balance security, compliance, and a good user experience. For more information on these policies and how to set them, read The Windows Update policies you should set and why. 

Prepare for changes affecting older Windows Embedded Compact 2013 content. Beginning September 30, 2022, older updates for Windows Embedded Compact and Windows Embedded CE will retire. Learn how to update to the most recent, December 2021, update to be compliant with SHA256 or see additional guidance for manual continuation with the older content. See the Windows Embedded Blog for more information.