Microsoft Rolls Out Windows 11 26H2 with Enhanced Security Features
Microsoft has rolled out Windows 11 26H2, also known as the Windows 11 2026 Update. This is not a massive update but includes several significant changes and improvements. One of the main focuses is on security, with new features to protect against elevation-of-privilege attacks.
Admin protection provides just-in-time administrative privileges and profile separation to help harden Windows against these types of attacks. Built-in Sysmon functionality enables users to capture system events that can be used for threat detection. Smart App Control can now be turned on or off without requiring a clean installation of Windows, making it easier to block untrusted or potentially harmful apps.
Other security improvements include expanded support for compatible peripheral fingerprint sensors and post-quantum cryptography enhancements, including API support for NIST-standardized ML-KEM and ML-DSA algorithms. Driver security enhancements change how the Windows kernel trusts third-party drivers, removing default trust for cross-signed drivers while maintaining support for WHCP and designated trusted legacy drivers.
In addition to security features, Windows 11 26H2 includes management and deployment enhancements, such as improved device association and OOBE customization, point-in-time restore for Windows, and policy-based app removal. User experience and accessibility enhancements include new productivity features in File Explorer, improved search results in Windows Search, and enhanced taskbar customization options.
Microsoft has emphasized that the Windows 11 2026 Update is designed to provide two years of support for users who install it. The update is being delivered as an enablement package, which should be relatively small for most people.