Windows 11 Security Updates End Nov. 10: Microsoft Warns Users to Upgrade

Some Windows 11 computers are approaching their final security update, leaving organizations less than a month to prepare.

Microsoft has confirmed that Windows 11 version 23H2 Enterprise and Education editions will reach end of updates on Nov. 10, 2026. The November 2026 security update will be the final regularly scheduled monthly security update for these editions. After that date, affected devices will no longer receive regular monthly security updates, potentially leaving newly discovered vulnerabilities unpatched.

The deadline raises immediate concerns for IT administrators managing older Windows deployments. Computers will continue functioning after support expires, but organizations that delay upgrades could face growing security risks as new threats emerge.

Which Windows 11 PCs will stop receiving security updates?

According to Microsoft's Windows 11 version 23H2 status page, Enterprise and Education editions will reach end of updates on Nov. 10.

The Home and Pro editions of Windows 11 version 23H2 reached end of support on Nov. 11, 2025.

Here's how the deadlines compare, based on Microsoft's Windows 11 release-information table:

Separately, Windows 11 version 24H2 Home and Pro editions have an Oct. 13, 2026, end-of-updates deadline. Enterprise and Education editions of version 24H2 remain supported until Oct. 12, 2027.

Windows 11 IoT Enterprise and Long-Term Servicing Channel (LTSC) products have separate lifecycle documentation that administrators should consult when evaluating those devices.

The deadlines apply to the installed Windows version and edition, regardless of the computer's manufacturer. A Dell, HP, Lenovo, or other Windows PC is not affected simply because of its brand or age.

Microsoft continues supporting newer Windows 11 releases, although the exact end-of-support date depends on the installed version and edition.

What happens when Windows 11 support ends?

Losing support does not mean an affected computer will immediately stop working or become compromised.

However, affected Windows versions stop receiving regular security updates and routine operating-system fixes. Customers seeking Microsoft support may be directed to upgrade to a supported Windows release. This means organizations may have fewer options for addressing vulnerabilities discovered after the deadline.

Unsupported devices can become increasingly difficult to secure, particularly when employees use them to access corporate applications, email accounts, financial systems, or sensitive customer information.

Microsoft has previously issued emergency Windows 11 security patches outside its regular update cycle, underscoring the importance of maintaining access to security fixes.

What Windows 11 users and IT teams should do before Nov. 10

The approaching deadline gives organizations a limited window to identify affected computers and complete upgrades before regular security updates end.

For businesses, the biggest challenge may be identifying which devices are still running version 23H2. Organizations managing hundreds or thousands of endpoints cannot assume that every Windows 11 computer is running a supported release.

The deadline also affects organizations with specialized software, hardware dependencies, or centrally managed devices that cannot be upgraded without testing.

How to check whether your PC is affected

Windows users can identify their installed version without additional software.

1. Press Windows + R, type winver, and press Enter.
2. Check the Windows version displayed in the About Windows window.
3. Open Settings > System > About to confirm the installed Windows edition.
4. If the device runs version 23H2, compare its edition against Microsoft's support schedule.
5. Open Settings > Windows Update and select Check for updates. If an upgrade is available, follow the installation instructions. If no upgrade appears, check device compatibility or contact your IT administrator.

Microsoft recommends upgrading eligible devices to a supported Windows 11 release to continue receiving monthly security updates.

For employees using company-managed computers, upgrades should be coordinated with their IT department to avoid conflicts with business applications or organizational device policies.

How organizations can identify affected devices

IT administrators should use centralized endpoint management tools, such as Microsoft Intune or other device inventory platforms, to identify computers still running Windows 11 version 23H2.

Administrators should also verify that completed upgrades are reflected in device inventory reports rather than assuming an update deployment was successful.

Organizations should pay particular attention to devices that support critical operations, handle sensitive information, or connect to important business systems.

Before deploying upgrades, administrators should confirm that applications, hardware drivers, and existing security controls remain compatible with the target Windows release.

Microsoft's Windows release health documentation can help administrators identify known issues that may affect deployment planning.

For additional background, eSecurityPlanet's Windows 11 security features and requirements guide explains built-in protections that organizations should consider when evaluating endpoint security.

Three security priorities before the deadline

Organizations should focus on three immediate actions:

• Identify unsupported and soon-to-be-unsupported devices. Review endpoint inventories to locate Windows 11 version 23H2 installations and confirm their editions.
• Upgrade eligible systems to a supported release. Test business applications, hardware compatibility, and security controls before completing deployments.
• Document risks for devices that cannot be upgraded immediately. Apply appropriate access restrictions, strengthen monitoring, and establish a clear migration or replacement timeline.

Organizations should also verify that endpoint protection, device encryption, and access-control policies remain effective during the transition.

As outlined in eSecurityPlanet's patch management process guide, maintaining accurate device inventories and validating updates are important steps in reducing vulnerability exposure.

For schools, government agencies, and businesses with specialized software, completing upgrades may require additional planning. Devices running legacy applications or hardware-specific systems may need testing before administrators can safely deploy a newer Windows release.

The key security concern is what happens after Nov. 10. Once monthly updates end, organizations that continue to run Windows 11 version 23H2 Enterprise or Education will have fewer options for addressing newly discovered operating system vulnerabilities.

For IT teams, the priority is clear: Identify affected Windows devices now, complete supported upgrades wherever possible, and establish temporary safeguards for systems that cannot be migrated before the deadline. Waiting until security updates stop could leave organizations managing avoidable risks across their endpoint environments.

For another Windows security deadline IT teams should prepare for, read eSecurityPlanet's Microsoft Warns Outdated Windows Devices Could Lose All Updates in 2027, which explains the upcoming Windows Update certificate expirations and how to avoid disruptions.