T
Thomas Trombley
Here are the latest Windows 11 features, capabilities, services, and tools that you can start using this month. Based on your feedback, we’ve also included information to help you catch up on lifecycle milestones and preview opportunities. We hope that this paints a better timeline and helps you embrace a secure, cloud-native future with Windows 11.
Looking for our general advice to move your organization forward? Check out Myths and misconceptions: Windows 11 and cloud native management. For the latest in Windows 11 management, and a peek at what’s coming soon, read on.
And you can check out freshly available on-demand webinars, interviews, and articles to help you get started or advance in your cloud-native management journey:
With the June 2024 security update for Windows 11, versions 23H2 and 22H2, you can now take advantage of new productivity features.
To honor your feedback, we’re summarizing the latest preview opportunities. Depending on the Windows Insider channel that you or your users belong to, here’s what you’re able to preview this month, as of today. Remember that many features are rolled out gradually. Find all the details for your respective channel in the Windows Insider Blog.
Do you agree that proper Windows management is part of a larger security strategy? How can we improve this newsletter to help your organization pioneer these improvements? Leave us a comment below and let’s connect again next month!
Continue the conversation. Find best practices. Bookmark the Windows Tech Community, then follow us @MSWindowsITPro on X and on LinkedIn. Looking for support? Visit Windows on Microsoft Q&A.
Continue reading...
New in Windows security
- [ENCRYPTION] Configure Windows Hello credentials to encrypt or decrypt files in known folders on the Windows device (for example, Documents, Desktop, and Pictures). Personal Data Encryption (PDE) along with BitLocker protects files and volumes while the system is at rest until the first user login. You can configure PDE settings via configuration service providers (CSP) or Microsoft Intune. For Intune, go to Endpoint security to select the folders and apply a policy to a group of users. For developers, there is also a PDE API to utilize when building Windows apps that generate or modify end-user content on Windows devices.
- [WINDOWS 11] You can now use Config Refresh to refresh settings on your Windows 11 devices at a cadence that makes sense for your organization (from 30 minutes to 24 hours). This helps prevent unexpected change configurations through either malicious software or registry edits.
- [AMA] Find answers to common questions on Windows security and best practices. Learn how to better protect your data and identities. Explore defaults, customization, and tips to help you “lock down” Windows in your environment.
New in device management
Looking for our general advice to move your organization forward? Check out Myths and misconceptions: Windows 11 and cloud native management. For the latest in Windows 11 management, and a peek at what’s coming soon, read on.
- [AUTOPATCH] [PREVIEW] Preview two new compliance features in Windows Autopatch. In the Intune admin center, you can view and remediate conflicting policies by navigating to Devices > Policy health > Policy conflicts. Want to improve the reliability of your devices after each update cycle? Check out the new post-update reliability report by navigating to Reports > Windows Autopatch > Windows quality updates. Select the Reports tab, then Reliability report.
- [GCC] For US Government Community Cloud (GCC) environments, you can now provision Cloud PCs in an Azure Commercial datacenter with Windows 365 Frontline for FedRAMP. With Windows 365 Frontline for FedRAMP, instead of purchasing a license for every shift worker, you need to only purchase enough licenses for the number of active employees at any given time. You can then manage those Cloud PCs just as you do any endpoint.
- [BYOD] Roll out the June 2024 security update for Windows 11, version 23H2 to improve the experience of employees using their own devices at work. Authenticated users within your organization can now manage their Windows 11 Pro PCs from a new location: Settings > Accounts > Linked devices. There's a new account manager available from the Start menu, making it easier for employees to manage their account settings and explore account benefits. Furthermore, two new actions are available from Windows account settings: add a recovery email address and back up sound preferences. Authenticated users can also take advantage of the Windows Backup app.
- [COPILOT+ PC] In case you’ve missed it, Copilot+ PCs are now widely available. With this release, servicing for Windows 11, version 24H2, the next annual feature update for Windows 11, has begun, along with our standard monthly release notes. Explore the hardware requirements, then get up to speed with the Top things to know about Copilot+ PCs from Microsoft Surface.
And you can check out freshly available on-demand webinars, interviews, and articles to help you get started or advance in your cloud-native management journey:
- My journey to the cloud with Microsoft Intune
- How to achieve cloud-native endpoint management with Microsoft Intune
- AMA: Finding your way to “cloud first”
- AMA: Managing Windows updates
- AMA: Windows Autopilot
New in Windows Server
- [ACCESS] With the June 2024 security update for Windows Server 2022 and Windows Server, version 23H2, you can restrict which clients can access Server Message Block (SMB) over Quick UDP Internet Connections (QUIC) servers. See how to configure this access control in Windows Server.
- [WS2025] [PREVIEW] Remember that you can preview Windows Server 2025 today. Catch up on new features, such as GPU innovations and Hyper-V live migration network selection.
- [DATACENTER] [PREVIEW] If you’re a Windows Server Insider, you can now preview Windows Server Datacenter: Azure Edition preview build 26212.
Lifecycle milestones
- [WINDOWS 10] The June 2024 security update was the last security release for Enterprise, Education, and IoT Enterprise editions of Windows 10, version 21H2. Windows 10, version 22H2, will be the final version of Windows 10, and all editions will remain in support with monthly security updates through October 14, 2025. Enterprise and IoT Enterprise LTSB/LTSC editions will continue to have support through their specified lifecycle dates.
- [WMIC] While the Windows Management Instrumentation Command line (WMIC). Was converted into a feature on demand (FoD) in Windows 11, version 22H2, it will be disabled by default for new installations of Windows 11 (including Copilot+ PCs) beginning with version 24H2. As documented in KB5039239, if you upgrade to Windows 11, version 24H2, the FoD is enabled by default.
- [AZURE] This is the last month before Azure Update Delivery service tag is deprecated. If your Azure Firewall is configured to receive Windows updates using this service tag, you'll need to start using Azure Firewall application rules instead. Specifically, use the Windows Update FQDN tag to configure your Azure Firewall to permit Windows updates for your Windows devices.
New in productivity and collaboration
With the June 2024 security update for Windows 11, versions 23H2 and 22H2, you can now take advantage of new productivity features.
- [SHARING] Explore new sharing capabilities. Create QR codes for webpage URLs and cloud files from the Windows share window. Select the share button in the Microsoft Edge toolbar and choose “Windows share options” to easily share URLs and files across your devices.
- [FILE EXPLORER] Manage your files faster. Just drag and drop them onto any of the breadcrumbs of the File Explorer address bar to move files.
Windows Insider Preview news
To honor your feedback, we’re summarizing the latest preview opportunities. Depending on the Windows Insider channel that you or your users belong to, here’s what you’re able to preview this month, as of today. Remember that many features are rolled out gradually. Find all the details for your respective channel in the Windows Insider Blog.
- [CANARY][PREVIEW] Rename your PC or change date and time seeing the familiar Windows 11 interface. Access the account manager right from the Start menu. Try new voice access commands in Windows 11 to simplify your search for files and apps. And if it accidentally crashes, it will automatically restart and facilitate reporting. Try the new copy button in the Windows share window. If you use the Snipping Tool to record a video of your screen, your recordings are automatically saved. Finally, preview improvements to your Microsoft Store experience.
- [DEV][PREVIEW] Curious about the latest Windows 11 preview builds? This month, you can manage your Windows 11 Pro PCs from a new location: Settings > Accounts > Linked devices. If you use Snipping Tool to record a video of your screen, your recordings are automatically saved just like the screenshots are. Finally, preview improvements to your Microsoft Store experience.
- [BETA][PREVIEW] This month, you can use your Android mobile device directly from the Start menu if you’re connected via Phone Link. Right-click on the apps pinned to the Start menu to jump right to the recent documents. Furthermore, try new voice access commands in Windows 11 to simplify your search for files and apps. And if it accidentally crashes, it will automatically restart and facilitate reporting. Share local files directly from within your search results in the search box on the taskbar. Finally, preview improvements to your Microsoft Store experience.
Do you agree that proper Windows management is part of a larger security strategy? How can we improve this newsletter to help your organization pioneer these improvements? Leave us a comment below and let’s connect again next month!
Continue the conversation. Find best practices. Bookmark the Windows Tech Community, then follow us @MSWindowsITPro on X and on LinkedIn. Looking for support? Visit Windows on Microsoft Q&A.
Continue reading...