Windows 10: A guide to the updates

The launch of a major Windows 10 update isn’t the end of a process — it’s really just the beginning. As soon as one of Microsoft’s feature updates (such as Windows 10 version 22H2) is released, the company quickly gets to work on improving it by fixing bugs, releasing security patches, and occasionally adding new features.

In this story we summarize what you need to know about each update released to the public for the most recent versions of Windows 10 — versions 22H2 and 21H2. (Microsoft releases updates for those two versions together.) For each build, we’ve included the date of its initial release and a link to Microsoft’s announcement about it. The most recent updates appear first.

For details about how to install and manage Windows updates, see “How to handle Windows 10 and 11 updates.” If you’re looking for information about Insider Program previews for upcoming feature releases of Windows 10, see “Windows 10 Insider Previews: A guide to the builds.”

Updates to Windows 10 versions 21H2 and 22H2

Windows 10 KB5048652 (OS Builds 19044.5247 and 19045.5247)

Release date: December 10, 2024

The update has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and December 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about Windows 10 KB5048652.)

KB5046714 (OS Build 19045.5198) Preview

Release date: November 21, 2024

This build fixes a variety of bugs, including one in which Win32 shortcuts did not back up to the cloud. 

(Get more info about KB5046714 Preview.)

KB5046613 (OS Builds 19044.5131 and 19045.5131)

Release date: November 12, 2024

This update fixes a bug in which some games did not start or stopped responding after you installed KB5044384. This occurred because some games use a third-party DRM component that are not compatible with that update. This update makes changes to support those games while the game developers address the DRM issue.

The update also has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and November 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about KB5046613.)

KB5045594 (OS Build 19045.5073) Preview

Release date: October 22, 2024

This build starts the rollout of the new account manager on the Start menu that makes it easy to view your account and access account settings. To change to a different user, select the ellipsis (…) next to “Sign out.” Not everyone will see this change yet, because it’s rolling out gradually.

The build also fixes a variety of bugs, including one in which a vmswitch triggers a stop error. This occurs when you use Load Balancing and Failover (LBFO) teaming with two virtual switches on a virtual machine (VM). In this case, one virtual switch uses single root Input/Output virtualization (SR-IOV).

(Get more info about KB5045594 Preview.)

KB5044273 (OS Builds 19044.5011 and 19045.5011)

Release date: October 8, 2024

This update has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and October 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about KB5044273.)

KB5043131 (OS Build 19045.4957) Preview

Release date: September 24, 2024

This build fixes several bugs, including one in which playback of some media might have stopped when you use certain surround sound technology, and another in which Windows server stopped responding when you used apps like File Explorer and the taskbar.

There is one known issue in this update, in which you might be unable to change your user account profile picture.

(Get more info about Windows 10 22H2 KB5043131 Preview).

KB5043064 (OS Builds 19044.4894 and 19045.4894)

Release date: September 10, 2024

This update has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and September 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about KB5043064.)

KB5041582 (OS Build 19045.4842) Preview

Release date: August 29, 2024

This build fixes several bugs, including one in which when a combo box had input focus, a memory leak could occur when you closed that window.

There is one known issue in this update, in which you might be unable to change your user account profile picture.

(Get more info about KB5041582 Preview.)

KB5041580 (OS Builds 19044.4780 and 19045.4780)

Release date: August 13, 2024

This release has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and August 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about KB5041580.)

KB5040525 (OS Build 19045.4717) Preview

Release date: July 23, 2024

This build fixes a variety of bugs, including one in which the Transmission Control Protocol (TCP) send code caused systems to stop responding during routine tasks, such as file transfers. This issue led to an extended send loop.

There is one known issue in this update, in which you might be unable to change your user account profile picture.

(Get more info about KB5040525 Preview.)

KB5040427 (OS Builds 19044.4651 and 19045.4651)

Release date: July 9, 2024

This update has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and July 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There are two known issues in this build, including one in which you might be unable to change your user account profile picture.

(Get more info about KB5040427.)

KB5039299 (OS Build 19045.4598) Preview

Release date: June 25, 2024

This build fixes a variety of bugs, including one in which apps’ jump lists on the taskbar sometimes failed, and another in which systems didn’t resume from hibernation after BitLocker was turned off.

There are four known issues in this update, including one in which Windows devices using more than one monitor might experience issues with desktop icons moving unexpectedly between monitors or have other icon alignment issues when attempting to use Copilot in Windows.

(Get more info about KB5039299 Preview.)

KB5039211 (OS Builds 19044.4529 and 19045.4529)

Release date: June 11, 2024

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and June 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There are two known issues in this build, including one in which Copilot in Windows is not currently supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5039211.)

KB5037849 (OS Build 19045.4474) Preview

Release date: May 29, 2024

This build fixes a variety of bugs, including one in which devices could not authenticate a second Microsoft Entra ID account, and another in which TWAIN drivers stopped responding when used in a virtual environment.

There are four known issues in this update, including one in which Windows devices using more than one monitor might experience desktop icons moving unexpectedly between monitors or have other icon alignment issues when attempting to use Copilot in Windows.

(Get more info about KB5037849 Preview.)

KB5037768 (OS Builds 19044.4412 and 19045.4412)

Release date: May 14, 2024

This update fixes a bug that caused VPN connections to fail. In addition, it has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and May 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There are four known issues in this build, including one in which Copilot in Windows is not currently supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5037768.)

KB5036979 (OS Build 19045.4355) Preview

Release date: April 23, 2024

With this build, you will start getting account-related notifications for Microsoft accounts in Settings > Home. The account also backs up all your account-related data and helps you to manage your subscriptions. The update also makes the Widgets on the lock screen more reliable.

A number of bugs have also been fixed, including one in which Windows Local Administrator Password Solution’s Post Authentication Actions (PAAs) did not occur at the end of the grace period. Instead, they occurred at restart.

(Get more info about KB5036979 Preview.)

KB5036892 (OS Builds 19044.4291 and 19045.4291)

Release date: April 9, 2024

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and April 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There are two known issues in this build, including one in which Copilot in Windows is not currently supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5036892.)

KB5035941 (OS Build 19045.4239) Preview

Release date: March 26, 2024

In this build, Windows Hello for Business admins can now use mobile device management to turn off the prompt that appears when users sign in to an Entra-joined machine. To do it, turn on the “DisablePostLogonProvisioning” policy setting. After a user signs in, provisioning is off for Windows 10 and Windows 11 devices.

The update also update improves the Remote Desktop Session Host. You can now set up its “clipboard redirection” policy to work in a single direction from the local computer to the remote computer. You can also reverse that order.

A number of bugs have also been fixed, including one in which a network resource could not be accessed from a Remote Desktop session when the Remote Credential Guard feature was turned on, and another that affected the time service, in which the Windows Settings app did not match what IT admins configured using MDM or a Group Policy Object.

(Get more info about KB5035941 Preview.)

KB5035845 (OS Builds 19044.4170 and 19045.4170)

Release date: March 12, 2024

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and March 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There are two known issues in this build, including one in which Copilot in Windows is not currently supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5035845.)

KB5034843 (OS Build 19045.4123) Preview

Release date: February 29, 2024

In this update, using Windows share, you can now directly share URLs to apps like WhatsApp, Gmail, Facebook, and LinkedIn. Sharing to X (formerly Twitter) is coming soon.

The update also fixes a variety of bugs, including one in which Azure Virtual Desktop virtual machines restarted randomly because of an access violation in lsass.exe, and another in Remote Desktop Web Authentication in which you might not have been able to connect to sovereign cloud endpoints.

There are two known issues in this build, including one in which Windows devices using more than one monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Windows. In the second issue, Copilot in Windows is not supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5034843 Preview.)

KB5034763 (OS Builds 19044.4046 and 19045.4046)

Release date: February 13, 2023

This build fixes several bugs, including one in which explorer.exe stopped responding when you restarted or shut down a PC that had a controller accessory attached to it.

It also has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and February 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There are two known issues in this build, including one in which Copilot in Windows (in preview) is not currently supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5034763.)

KB5034203 (OS Build 19045.3996) Preview

Release date: January 23, 2024

The update fixes a variety of bugs, including one that affected BitLocker data-only encryption. A mobile device management (MDM) service, such as Microsoft Intune, might not get the right data when you use the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node.

It also fixed a bug that affected Group Policy Folder Redirection in a multi-forest deployment. The issue stopped you from choosing a group account from the target domain. And it addresses an issue that caused some single-function printers to be installed as scanners.

There are two known issues in this build, including one in which Windows devices using more than one monitor might experience issues with desktop icons moving unexpectedly between monitors or other icon alignment issues when attempting to use Copilot in Windows. In the second issue, Copilot in Windows is not supported when your taskbar is located vertically on the right or left of your screen.

(Get more info about KB5034203 Preview.)

KB5034122 (OS Builds 19044.3930 and 19045.3930)

Release date: January 9, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and January 2024 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There is one known issue in this build, affecting ID admins, in which using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management apps might incorrectly show a 65000 error in the “Require Device Encryption” setting for some devices in your environment. To mitigate the issue in Microsoft Intune, you can set the “Enforce drive encryption type on operating system drives” or “Enforce drive encryption on fixed drives” policies to not configured.

(Get more info about KB5034122.)

KB5032189 (OS Builds 19044.3693 and 19045.3693)

Release date: December 12, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and December 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There is one known issue in this build, which affects ID admins, in which using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in MDM apps might incorrectly show a 65000 error in the “Require Device Encryption” setting for some devices in your environment. To mitigate the issue in Intune, you can set the “Enforce drive encryption type on operating system drives” or “Enforce drive encryption on fixed drives” policies to not configured.

(Get more info about KB5033372.)

Windows 10 22H2 KB5032278 (OS Build 19045.3758) Preview

Release date: November 30, 2023

The update adds the Copilot in Windows (in preview) button to the right side of the taskbar. This only applies to devices that run Home or Pro editions (non-managed business devices). When you select it, the AI-powered Copilot in Windows appears at the right on your screen. It will not overlap with desktop content or block open app windows. The update also adds Windows Update opt-in notifications to the screen when you sign in.

The update also fixes a variety of bugs, including one that affected non-admin processes. It also fixes a leak in volatile notifications, which might have stopped you from signing into your computer.

There is one known issue in this build that applies to IT admins, in which using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the “Require Device Encryption” setting for some devices in your environment.

(Get more info about Windows 10 22H2 KB5032278 Preview.)

KB5032189 (OS Builds 19044.3693 and 19045.3693)

Release date: November 14, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and November 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There is one known issue in this build that affects ID admins, in which using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in MDM apps might incorrectly show a 65000 error in the “Require Device Encryption” setting for some devices in your environment. To mitigate the issue in Microsoft Intune, you can set the “Enforce drive encryption type on operating system drives” or “Enforce drive encryption on fixed drives” policies to not configured.

(Get more info about KB5032189.)

KB5031445 (OS Build 19045.3636) Preview

Release date: October 26, 2023

The update fixes a variety of bugs, including one in which touchscreens did not work properly when you used more than one display, and another in which there was a memory leak in ctfmon.exe.

There is one known issue in this build, which applies to IT admins, in which using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the “Require Device Encryption” setting for some devices in your environment.

(Get more info about KB5031445 Preview.)

KB5031356 (OS Builds 19044.3570 and 19045.3570)

Release date: October 10, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and October 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about KB5031356.)

KB5030300 (OS Build 19045.3516) Preview

Release date: September 26, 2023

This update brings back a search box design for accessing apps, files, settings, and more from Windows and the web. If you have a top, bottom, regular, or small icons taskbar, the search box appears.

The build also fixes a variety of bugs, including one in which Microsoft Defender stopped some USB printers from printing, and another in which in Windows Defender Application Control (WDAC) AppID Tagging policies could have greatly increased device startup time.

(Get more info about KB5030300 Preview.)

KB5030211 (OS Builds 19044.3448 and 19045.3448)

Release date: September 12, 2023

This build fixes a bug that affected authentication in which using a smart card to join or rejoin a computer to an Active Directory domain could have failed.

The build also has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and September 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

(Get more info about KB5030211.)

KB5029331 (OS Build 19045.3393) Preview

Release date: August 22, 2023

This update improves how Windows detects your location to help give you better weather, news, and traffic information. It also expands the rollout of notification badging for Microsoft accounts on the Start menu, which gives you quick access to important account-related notifications. In addition, it adds Windows Backup to your device.

The update also fixes a wide variety of bugs, including one in which print jobs sent to a virtual print queue failed without an error, and another in which Remote Desktop (RD) sessions disconnected when multiple apps were in use.

There is one known issue in this update, in which devices with Windows installations created from custom offline media or a custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5029331 Preview.)

KB5029244 (OS Builds 19044.3324 and 19045.3324)

Release date: August 8, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and August 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There is one known issue in this update, in which devices with Windows installations created from custom offline media or a custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5029244.)

KB5028244 (OS Build 19045.3271) Preview

Release date: July 25, 2023

This update fixes a wide variety of bugs, including one in which Timeout Detection and Recovery (TDR) errors might have occurred when you played a game, another in which some display and audio devices were missing when your system resumed from sleep, and another in which some VPN clients could not establish connections.

There is one issue in this update, in which devices with Windows installations created from custom offline media or a custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5028244 Preview.)

KB5028166 (OS Builds 19044.3208 and 19045.3208)

Release date: July 11, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and July 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There is one known issue in this update, in which devices with Windows installations created from custom offline media or a custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5028166.)

KB5027293 (OS Build 19045.3155) Preview

Release date: June 27, 2023

This update adds new features and improvements to Microsoft Defender for Endpoint. For more information, see Microsoft Defender for Endpoint. It also lets you authenticate across Microsoft clouds. This feature also satisfies Conditional Access checks if they are needed.

A variety of bugs have been fixed, including one in which scheduled monthly tasks might not have run on time if the next occurrence happened when daylight savings time occured, and another in which all the registry settings under the Policies paths could have been deleted when you did not rename the local temporary user policy file during Group Policy processing.

There is one known issue in this update, in which devices with Windows installations created from custom offline media or custom ISO images might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5027293 Preview.)

KB5027215 (OS Builds 19044.3086 and 19045.3086)

Release date: June 13, 2023

This build has a wide variety of security updates. For details, see Microsoft’s Security Update Guide and June 2023 Security Updates.

What IT needs to know: Because this is a security update, it should be applied relatively soon. Over the next few weeks, check for reports about problematic issues, and if all seems well, apply the update.

There is one known issue in this update, in which devices with Windows installations created from custom offline media or a custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5027215.)

KB5026435 (OS Build 19045.3031) Preview

Release date: May 23, 2023

This update revamps the search box; Microsoft claims it will let you “easily access apps, files, settings, and more from Windows and the web. You will also have access to the latest search updates, such as search highlights.” If you don’t like the design, you can revert to the existing search box via taskbar context menu or by responding to a dialog that appears when you use search.

A variety of bugs have been fixed, including one that did not let you access the Server Message Block (SMB) shared folder and another in which the Windows Firewall dropped all connections to the IP address of a captive portal when you chose the Captive Portal Addresses option.

There is one known issue in this update, in which devices with Windows installations created from custom offline media or a custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge.

(Get more info about KB5026435 Preview.)

Windows 10 2022 Update (version 22H2)

Release date: October 18, 2022

The Windows 10 2022 Update is, in Microsoft’s words, “a scoped release focused on quality improvements to the overall Windows experience in existing feature areas such as quality, productivity and security.” In other words, there’s not much new here, although Computerworld blogger Susan Bradley did uncover a handful of new group policies in the release.

Home and Pro editions of the 2022 Update will receive 18 months of servicing, and Enterprise and Education editions will have 30 months of servicing.

To install the update, go to Settings > Update & Security > Windows Update and select Check for updates. If the update appears, select Download to install it.

(Get more info about the Windows 10 2022 Update.)

Windows 10 November 2021 Update (version 21H2)

Release date: November 16, 2021

Version 21H2, called the Windows 10 November 2021 Update, is the second feature update to Windows 10 released in 2021. Here’s a quick summary of what’s new:

Wi-Fi security has been enhanced with WPA3 H2E standards support.

GPU compute support has been added in the Windows Subsystem for Linux (WSL) and Azure IoT Edge for Linux on Windows (EFLOW) deployments for machine learning and other compute-intensive workflows.

There are also a number of features designed for IT and business:

Windows Hello for Business has a new deployment method called cloud trust that simplifies passwordless deployments.

For increased security, there have been changes to the Universal Windows Platform (UWP) VPN APIs, which includes the ability to implement common web-based authentication schemes and to reuse existing protocols.

Apps can now be provisioned from Azure Virtual Desktop. This allows those apps to run just like local apps, including the ability to copy and paste between remote and local apps.

The release closes the gap between Group Policy and mobile device management (MDM) settings. The device configuration settings catalog has been updated to list more than 1,400 settings previously not available for configuration via MDM. The new MDM policies include administrative template (ADMX) policies, such as App Compat, Event Forwarding, Servicing, and Task Scheduler.

An upgrade to Windows 10 Enterprise includes Universal Print, which now supports print jobs of up to 1GB or a series of print jobs from an individual user that add up to 1GB within any 15-minute period.

Universal Print integrates with OneDrive for web and Excel for web. This allows users of any browser or device connected to the internet to print documents hosted in OneDrive for web to a printer in their organization without installing printer drivers on their devices.

Microsoft has also announced that starting with this release, Windows 10 will get feature updates only once a year.

Windows 10 May 2021 Update (version 21H1)

Release date: May 18, 2021

Version 21H1, called the Windows 10 May 2021 Update, is the most recent update to Windows 10. This is a relatively minor update, but it does have a few new features.

Here’s a quick summary of what’s new in 21H1:

Windows Hello multicamera support: If you have an external Windows Hello camera for your PC, you can set the external camera as your default camera. (Windows Hello is used for signing into PCs.) Why should this change matter to you? If you have an external camera, you probably bought it because it’s superior to the built-in, internal one on your computer. So with this change, you’ll be able to use the more accurate camera for logging into your PC.

Improved Windows Defender Application Guard performance: Windows Defender Application Guard lets administrators configure applications to run in an isolated, virtualized container for improved security. With this change, documents will open more quickly. It can currently take up to a minute to open an Office document in it.

Better Windows Management Instrumentation (WMI) Group Policy Service support: Microsoft has made it easier for administrators to change settings to support remote work.

Windows 10 October 2020 Update (version 20H2)

Release date: October 20, 2020

Version 20H2, called the Windows 10 October 2020 Update, is the most recent update to Windows 10. This is a relatively minor update but does have a few new features.

Here’s a quick summary of what’s new in 20H2:

The new Chromium-based version of the Microsoft Edge browser is now built directly into Windows 10.

The System page of Control Panel has been removed. Those settings have been moved to the Settings app.

The Start menu’s tiled background will match your choice of Windows themes. So the tiled background will be light if you’re using the Windows 10 light theme and dark if you’re using the Windows 10 dark theme.

When you use Alt-Tab, Edge will now display each tab in your browser in a different Alt-Tab window. Previously, when you used Alt-Tab, Edge would get only a single window. You can change this new behavior by going to Settings > System > Multitasking.

When you pin a site to the taskbar in Edge, you can click or mouse over its icon to see all your browser tabs that are open for that website.

When you detach a keyboard on a 2-in-1 device, the device will automatically switch to the tablet-based interface. Previously, you were asked whether you wanted to switch. You can change that setting by going to Settings > System > Tablet.

The Your Phone app gets a variety of new features for some Samsung devices. When using one of the devices, you can interact with the Android apps on your phone from the Your Phone app on Windows 10.

What IT needs to know: Windows 10 version 20H2 also has a variety of small changes of note for sysadmins and those in IT.

IT professionals who administer multiple mobile devices get a new Modern Device Management (MDM) “Local Users and Groups” settings policy that mirrors options available for devices that are managed through Group Policy.

Windows Autopilot, used to set up and configure devices in enterprises, has gained a variety of small enhancement, including better deployment of HoloLens devices, the addition of co-management policies, enhancements to Autopilot deployment reporting, and the ability to reuse Configuration Manager task sequences to configure devices.

Microsoft Defender Application Guard now supports Office. This allows untrusted Office documents from outside an enterprise to launch in an isolated container to stop potentially malicious content from compromising computers or exploiting personal information found on them.

Latest Cumulative Updates (LCUs) and Servicing Stack Updates (SSUs) have been combined into a single cumulative monthly update, available via Microsoft Catalog or Windows Server Update Services.

Biometric sign-on has been made more secure. Windows Hello now has support for virtualization-based security for certain fingerprint and face sensors, which protects, isolates, and secures a user’s biometric authentication data.

For more details, see Microsoft’s “What’s new for IT pros in Windows 10, version 20H2.”

Windows 10 May 2020 Update (version 2004)

Release date: May 27, 2020

Version 2004, called the Windows 10 May 2020 Update, is the most recent update to Windows 10. This is a relatively minor update but does have a variety of new features for both users and system administrators. For more details, see: “Review: Windows 10 May 2020 Update delivers little tweaks that add up to… well, not a lot.”

Here’s a quick summary of what’s new in 2004:

Cortana now runs as a standalone app in a resizable window. It also loses a variety of capabilities, such as playing music, controlling home devices, and working on the lock screen.

Task Manager now displays new information, including the temperature of your GPU and your disk type.

Settings gets many small tweaks, including adding a header with account information, and a redone network status page that combines information that used to be found on multiple pages, such as your IP address, current connection properties and data usage.

The Windows Subsystem for Linux (WSL) gets more features. It now uses a real Linux kernel, and is faster than previously.

IT can now take advantage of Windows Hello biometrics logins rather than passwords, by setting that up as the default on enterprise devices.

Installing and setting up Windows for others has been made easier thanks to new controls added to Dynamic Update, which can lead to less downtime during installation for users.

A variety of new commands have been given to PowerShell for Delivery Optimization, a Windows networking service that reduces bandwidth consumption by sharing the work of downloading update and upgrade packages among multiple devices in business deployments.

The security of the Chromium version of Edge has been improved, thanks to porting Application Guard to it.

Windows 10 November 2019 Update (version 1909)

Release date: Nov. 12, 2019

Version 1909, called the Windows 10 November 2019 Update, is the most recent update to Windows 10. There are very few new features in this update, making it more like a service pack of old than a feature update. At this point it’s not clear whether in the future there will be one full-featured update and one service-pack-like update per year or whether Microsoft will go back to its two-feature-updates-a-year schedule. For more details, see “What we know so far about the unusual Windows 10 1909” and “5 unanswered questions about Windows 10 1909.”

Here’s a quick summary of what’s new for users in 1909.

It lets you create calendar events straight from the taskbar. To do it, click the time on the taskbar and you’ll open the Calendar view. Now click a date and time, then type the event’s name into the text box. You’ll also be able to choose the date, time and location.

When you type a search into the search box, it will now search through files in your OneDrive account as well as on your PC. Also, as you type, a drop-down menu with suggested files appears. Click a file to open it.

Voice assistants in addition to Cortana, including Amazon’s Alexa, will be able to run on Windows 10’s lock screen.

Under-the-hood improvements should speed up the performance of some PCs, as well as increase the battery life in some laptops.

The Start Menu has gotten minor tweaks. When you hover over items in the navigation pane on the left side of the menu, the items clearly show what you’re about to click.

What IT needs to know: The following features in 1909 are of note for IT staff.

Windows containers no longer need to have their host and container versions match. That requirement restricted Windows from supporting mixed-version container pod scenarios. Previously, containers from older versions of Windows 10 couldn’t be run on newer versions of Windows 10. In this update, it’s possible, so that a container made using 1903, for example, can be run on 1909.

Windows Defender Credential Guard, which protects enterprise users’ logins and credentials against theft, is now available for ARM64 devices. Some Windows 10 convertible PCs use ARM64.

Enterprises can now use Microsoft’s Intune enterprise mobility management (EMM) service to allow devices running Windows 10 in S mode to install and run Win32 (desktop) apps. Before this, S Mode only allowed devices to run apps from the Microsoft Store. Microsoft Store apps don’t run on the desktop.

The security of BitLocker encryption has been improved. Whenever BitLocker is used to encrypt a device, a recovery key is created, but before this security improvement, it was possible for an unauthorized user to get access to the recovery key and decrypt the device. Now, PCs have additional security if a key is exposed. Here’s how Microsoft explains the change: “Key-rolling or Key-rotation feature enables secure rolling of Recovery passwords on MDM managed AAD devices upon on demand request from Microsoft Intune/MDM tools or upon every time recovery password is used to unlock the BitLocker protected drive.”

There are two known issues in this update: one in which some users cannot set Win32 program defaults for certain app and file type combinations using the Open with… command or Settings > Apps > Default apps, and another in which Microsoft Notepad and other Win32 programs cannot be set as default applications.

(Get more info about KB4464455.)

Windows 10 October 2018 Update (version 1809)

Release date: October 2, 2018; paused October 5; re-released November 13, 2018

Version 1809, called the Windows 10 October 2018 Update, is the feature update that preceded the May 2019 Update. Here’s a quick summary of what’s new for users in it. (For more details, see our full review.)

A new, powered-up Windows Clipboard can hold multiple clips, store clips permanently, let you preview clips and choose which one you’d like to paste into a document, and share clips across Windows 10 devices.

A new screenshot and annotation tool called Snip & Sketch lets you capture and annotate the entire screen, a rectangular portion of the screen or a freehand-drawn portion of it. After you take a screen capture, you can annotate it and then save it to a file, copy it to the Clipboard, open it in another program or share it via email, social media and other methods.

Storage Sense, which helps save storage space, now works with OneDrive Files On-Demand to clean out files you’ve downloaded from OneDrive cloud storage to your PC but that you don’t use any longer. You can choose how long you would like the cloud files to stay on your PC unused before you want them deleted, from never to 60 days.

The Microsoft Edge browser lets you set autoplay permissions for sound and video on websites on a site-by-site basis. It also lets you look up word definitions in its built-in eReader for books and PDFs, and mark up PDFs and books using a highlighter and by adding notes.

The new Your Phone app links Windows 10 devices to iOS and Android phones. It allows you to start web browsing on an iOS or Android device and then continue where you left off on your PC. It also lets you view photos on your Android phone from your Windows 10 PC.

Search Previews have been powered up slightly. You no longer need to click to display the preview panel; it opens automatically. It also now shows files found on your PC.

Smaller changes include a new dark theme for File Explorer; the addition of the SwiftKey swipe keyboard, which lets you enter text by swiping a finger across an onscreen keyboard; updates that are less intrusive; and faster sign-ins on shared PCs.

What IT needs to know: There are few significant changes that affect IT in the Windows 10 October 2018 Update, other than New Microsoft Edge Group Policies that let admins enable and disable full-screen mode, printing, the favorites bar, and browser history saves. IT can also allow or ban Edge extensions (not that there are many available) and configure the Home button and new tab page and startup options.

Windows 10 April 2018 Update (version 1803)

Release date: April 30, 2018

Version 1803, called the Windows 10 April 2018 Update, is the major update to Windows 10 that preceded the October 2018 Update. Here’s a quick summary of what’s new for users in it. (For more details, see our full review.)

The most important new feature is Timeline, which lets you review and resume activities and open files you’ve started on your PC, or any other Windows PCs you have. It also tracks what you’ve done on iOS and Android devices if you install Microsoft’s digital assistant Cortana on them and are logged in. It shows a list of activities day by day for up to 30 days. Each activity shows up as a large tile, with the file name and document title or URL and website name across it, and the name of the application or app that created it across the top. Click any activity to reopen it. (Note that at present, Timeline only tracks activities in certain Microsoft programs such as the Edge browser and Office applications.)

The new Diagnostic Data Viewer is supported, which Microsoft is designed to let you see the “diagnostic data collected from your Windows devices, how it is used, and to provide you with increased control over that data.” However, the information is presented in such a complex, technical way that even programmers will likely have a difficult time understanding it. The viewer isn’t built directly into the Windows 10 April 2018 Update. Instead, you have to download it from the Microsoft Store.

The My People feature now lets you pin up to 10 contacts on the Windows taskbar. Previously, you could only pin up to three.

Microsoft Edge gets several minor tweaks, including a revamped Hub, the ability to mute auto-playing audio in tabs, and a forms-filler for web-based forms.

The Notebook feature of Cortana gets a new, cleaner interface for its Notebook. It now has two tabs, Organizer and Manage Skills. The Organizer makes it easier to create lists and set reminders. The Manage Skills tab lets you add “skills” to Cortana, such as controlling your home and its appliances, connecting Cortana to music services such as Spotify, tracking your fitness and more.

You get more control over app permissions, such as whether they can access your camera, location and contacts.

What IT needs to know: IT staff should be aware of these features that are new in the Windows 10 April 2018 Update:

Windows 10 Professional now gets the Windows Defender Application Guard, which prote