Windows 11 23H2 end of support lands on November 10, 2026, for Enterprise and Education editions. After that day’s Patch Tuesday update, those PCs stop getting security fixes. If you manage school or work laptops, you have only days left to move them.
Here’s the short version before the details.
- Last update: November 2026 Patch Tuesday, on November 10.
- Affected: 23H2 Enterprise, Education, Enterprise multi-session, and IoT Enterprise (build 22631).
- Not affected: Home and Pro, which already lost support on November 11, 2025.
- Best targets: 25H2 or 26H2, depending on how long you want support.
If you run a home PC, you’ve likely moved on already. This one is mostly for IT teams, schools, and anyone using a work-managed laptop.
Who loses updates with Windows 11 23H2 end of support
Microsoft’s release health dashboard lists November 10, 2026 for the managed editions, according to Windows Forum. The IoT Enterprise edition on the same build shares that date.
Windows 11 IoT Enterprise LTSC 2024 is a separate product and is serviced through October 10, 2034. So an LTSC device isn’t caught up in this deadline.
After the cutoff, the PCs keep running. They just stop receiving monthly security and quality fixes. Neither iSec7 nor Windows Forum mentions an Extended Security Updates option for 23H2, so don’t plan around one.
25H2 or 26H2: which version should you move to?
Both work. The difference is how much support time you buy. Windows Forum lists the end dates for Enterprise and Education like this.
| Target version | Build | Updates end (Enterprise/Education) |
|---|---|---|
| Windows 11 25H2 | 26200 | October 2028 |
| Windows 11 26H2 | 26300 | October 9, 2029 |
25H2 suits cautious or regulated groups that want the version most admins have tested longest. 26H2 gives you an extra year of support. If you want a refresher on the newer release, see our guide on how to get Windows 11 26H2.
Why 23H2 upgrades are bigger than a normal Windows 11 update
Devices on 24H2 and 25H2 can jump to 26H2 with a tiny enablement package. Windows Latest measured it at about 174KB, and it needs one restart. It requires the September 22, 2026 update (KB5124010) or later.
23H2 sits on a different servicing branch, so it can’t use that shortcut. It needs a full feature update, and Windows Latest puts the download near 6.5GB. That figure is based on Microsoft’s own 25H2 example, so your size may vary by edition.
The practical result is longer installs, more bandwidth, and more testing. A clean install from the 26H2 ISO, roughly 8GB, is another route. If you’re also tracking older releases, our post on Windows 11 24H2 end of support covers the previous deadline.
A quick plan for the last few days
You don’t need a big project plan. You need a short, ordered list.
- Inventory every device on build 22631, grouped by edition and by how it’s managed (WSUS, Configuration Manager, Intune, or Autopatch).
- Check your deferral and target-version policies, so they allow the version you picked.
- Pilot on a few machines with your key apps before a wider rollout.
- Install the November 2026 update even if migration isn’t done.
Schools have an extra wrinkle. Lab machines are often imaged once and left alone for months, so a forgotten 23H2 image can sit on a campus network long after the deadline. Update the master image first, then redeploy, rather than patching each machine one at a time.
That last step matters. It gets you the final fixes for 23H2 while you finish the move. On unmanaged PCs, go to Settings, then Windows Update, then Check for updates.
Document anything that can’t move, too, such as a PC tied to old software. Write down the owner, the reason, and a plan, so nobody finds an unpatched machine by surprise later.
Also test for known issues. Windows Forum lists a Credential Guard domain trust problem fixed in KB5124010 and later, black screens after sign-in on Azure Virtual Desktop hosts using FSLogix, and crashes in older apps that use built-in AC-3 decoding. The last one has no fix yet.
Frequently Asked Questions
What happens if I stay on Windows 11 23H2 after November 10?
Your PC keeps working, but it stops getting security updates. New vulnerabilities stay unpatched, which is a real risk on work or school networks.
Does Windows 11 23H2 end of support affect Home and Pro?
No, those editions already ended on November 11, 2025. This deadline is only for Enterprise, Education, and related managed editions.
Can I pay for extra updates on 23H2?
Reports don’t mention an Extended Security Updates program for Windows 11 23H2. Check with your Microsoft reseller before assuming one exists.
Do 24H2 and 25H2 PCs need the big download too?
No. Per Windows Latest, they can reach 26H2 with the small enablement package and one restart, as long as they have KB5124010 or later.
My advice: pick 26H2 unless an app vendor or compliance rule says otherwise. It gives you the longest support runway, and you only do this migration once. Start with a small pilot group today, since the 23H2 jump is a full install and you want surprises early rather than on November 9.
Leave a Reply