Windows 11 version 26H2 is available from Microsoft as of September 29, 2026, and Iru now supports it. 26H2 is delivered as an enablement package on top of 24H2 and 25H2, so devices update with a small download and one restart. For more information, visit the Microsoft website.
Microsoft’s big annual Windows release is here. Windows 11 version 26H2 takes the security features Microsoft rolled out over the past year and makes them permanent.
Upgrading is easy. There’s no full reinstall. Devices get a small download and one restart.
Iru supports 26H2 today, so you can move your fleet now.
What admins need to know
Delivered as a minor enablement package, 26H2 permanently activates features rolled out over the past year. Here’s a run-down of what’s most important:
Security
- Administrator protection gives admins temporary elevated rights instead of permanent ones, and separates admin and standard profiles to limit privilege-escalation attacks.
- Built-in Sysmon captures system events for threat detection. It's off by default, and you decide what it logs.
- Windows Hello Enhanced Sign-in Security now works with compatible external fingerprint readers, so more PCs can use it.
- Driver trust is tightening. Cross-signed drivers are no longer trusted by default. WHCP-certified drivers and a list of approved legacy drivers still work.
Management and deployment
- Settings backup and restore now covers Entra hybrid joined devices, Cloud PCs and multi-user setups, which helps with refreshes and migrations.
- Policy-based app removal lets Enterprise and Education admins remove more preinstalled Microsoft apps through Group Policy.
- App update orchestration lets participating apps coordinate their updates with Windows Update.
Now on by default
Three features that were behind temporary commercial controls in 25H2 are now on in 26H2: Windows settings backup (existing admin policies still apply), app-specific taskbar actions, and File Explorer improvements. Some have eligibility requirements, so check Microsoft's documentation for each.
The 26H1 catch
If you purchased devices this year that run on 26H1, those devices will be unable to install 26H2. You will need to wait until 2027 when Microsoft plans to bring everyone back onto the same foundation.
Upgrade to 26H2 today
The major Windows Release bundles several security features, and turns them on by default. The OS is generally available, and with Iru, you can quickly get devices moved via Managed OS.
Book a demo to see more.