Windows news you can use: September 2024

[ThomasTrombley]

What a month of improvements across Windows 11! Let’s explore innovations in Copilot+ PCs and AI—and catch up on the updates that will help you keep your competitive edge across Windows security, device and update management, Windows Server, productivity and collaboration, and more.

New in Windows security

• [RESILIENCY] Explore key takeaways from this month’s Windows Endpoint Security Ecosystem Summit: Taking steps that drive resiliency and security for Windows customers.
• [SERVER][GOVERNMENT] If you work in smart card federated authentication environments, you can now use strong name-based mapping on Windows Server 2019 and newer. This much-anticipated feature helps you with the hardening changes for certificate-based authentication on Windows domain controllers.
• [DEFENDER] Do you know that keylogging malware protection is built into Windows? Learn how this Microsoft Defender for Endpoint capability works even if you’ve never seen a detection.

New in device and update management

• [AUTOPATCH] We are unifying update management by integrating the Windows Update for Business deployment service into Windows Autopatch as a single solution. The current licensing requirements will remain the same, but you’ll now benefit from a unified dashboard with centralized control. This means you can more efficiently manage updates for devices across your organization and automate routine tasks.
• [INTUNE][REPORTS] Two new alerts are here to improve your Windows update compliance reporting. Whether you use Microsoft Intune or Windows Update for Business reports, learn how lack of diagnostic data affects your reports, how to find and interpret the alert signal, and how to remediate the issues.
• [INTUNE] If you’ve configured your organization’s devices to receive automatic updates for Microsoft Store apps, those devices will soon receive a new version of the Intune Company Portal app. Its improved look makes notifications more actionable for your users.
• [INTUNE SUITE] Managing apps just got easier with an improvement to Microsoft Intune Enterprise App Management. When you navigate to the Apps blade, you’ll now be able to see and act on any apps with available updates. You can also configure app updates easier with pre-populated values for application name, publisher, and command-line install command.
• [INTUNE][EVENT] Register for four hours of live Ask Microsoft Anything (AMA) and feedback sessions at the upcoming Tech Community Live: Microsoft Intune, October 1, 2024.

New in Microsoft Copilot and Copilot+ PCs

• [RECALL] Read an important update on the security and privacy models, security architecture, and technical controls implemented in Recall (preview), an all-new exclusive experience coming to Copilot+ PCs.
• [COPILOT+ PC] As part of your PC refresh strategy, look for enhanced AMD Ryzen AI 300 and Intel Core Ultra 200v processors. New silicon technology is available today to make your Copilot+ PCs even more powerful. New AI experiences will reach these devices in October and November of this year.
• [COPILOT] To catch up on the latest about Microsoft Copilot, including how to manage it for your scenario, see FAQ - Updates to Microsoft Copilot.
• [EDP] People signing in to their Windows PCs with a Microsoft Entra account can now benefit from Microsoft Copilot with enterprise data protection (EDP).
• [POLICIES] You can enable the new Microsoft Copilot experience for the Windows devices in your organization by using the TurnOffWindowsCopilot policy and pinning the Microsoft 365 app using the existing policies for Taskbar pinning.

New in Windows Server

• [HOTPATCH][PREVIEW] A preview of Hotpatching for Windows Server 2025 Datacenter and Standard editions is now available! Environments with on-premises infrastructures and non-Azure clouds can now experience security updates without reboots. This is the first time this capability is available outside of the Azure cloud. Preview it today and let us know what you think.
• [WS 2025][PREVIEW] If you’re a Windows Server Insider, Windows Server Preview Build 26280 is now available. With it, you can now download and install Windows Admin Center right from the Windows Server desktop. Just make sure that you’re running a desktop version of Windows Server 2025 Datacenter or Standard, currently in preview. Additionally, if you use Windows Server with Desktop, check out the new Feedback Hub for Windows Server app.
• [AUTHENTICATION] Do you need to enroll Remote Desktop Services (RDS) for a TLS certificate from an enterprise certificate authority (CA)? Here’s a complete guide! From background about RDS to how it works to precise steps to configure the certificate template and then the Group Policy—find all you need to troubleshoot and remediate potential issues.

New in productivity and collaboration

• [WINDOWS APP] Access Windows from any major platform through Windows App. Connect to Windows 365, Azure Virtual Desktop, Remote Desktop, Remote Desktop Services, or Microsoft Dev Box. Get the app from the Microsoft Store, your web browser, or other major app stores.

Get the September 2024 security update to start using the following improvements, which might be rolled out gradually.

• [WINDOWS SHARE] You can now share content to your Android device from the Windows Share window. Just pair your Android device with your Windows PC. Do that through the Link to Windows app on your Android device and Phone Link on your PC.
• [ACCESSIBILITY] Enjoy improved performance in Narrator and Voice access.
• [WIDGETS] If you work in the European Economic Area (EEA) regions, create widgets and feeds more securely and with improved APIs. Notice that some existing widgets will be removed or modified, as this update sets the foundation for new widgets and other features in development.

Install the September 2024 non-security preview update to preview what’s coming next month! Note that non-security features roll out gradually and might not yet be available for your device. Here are some highlights:

• [23H2 & 22H2] If you’re on Windows 11, version 23H2 or 22H2, you can now manage your Copilot Pro subscription in Settings > Accounts when signed in to your Microsoft account. You can also share local files directly from the Search box results on your taskbar.

Lifecycle turning points

Check out our lifecycle documentation for the latest updates on Deprecated features in the Windows client and Features removed or no longer developed starting with Windows Server 2025 (preview).

• [WSUS] Windows Server Update Services is being deprecated. Deprecation means that we are no longer investing in new capabilities. However, we are preserving all current functionality and will continue to publish updates through the WSUS channel. Read the deprecation notice for more details.

Windows Insider Preview news

Here’s a summary of this month’s new experiences available to Windows Insiders.

• [DEV][PREVIEW] With Windows 11 Build 26120.1843, Insiders in the Dev Channel can now see files shared via email, Teams, etc., in File Explorer Home > Shared. If you’re signed in with your Microsoft Entra account, you’ll also see files shared with others. You can also explore the Share option and search for local files directly from the taskbar. Other new features in this build include:
  • A new preview of Windows Sandbox. Use the ellipsis icon (…) at the upper right on the app to access runtime clipboard redirection, audio/video input control, and the ability to share folders with the host at runtime.
  • Small improvements to the taskbar access to Copilot and system tray, lock screen media controls, Start menu jump lists for certain apps and the new account manager.
  • The ability to change the default folder for saving Snipping Tool screenshots and recordings from the app settings.
• [BETA][PREVIEW] Insiders in the Beta Channel, with Windows 11 Build 22635.4225, you can now share content to your Android phone right from File Explorer. Just ensure that Phone Link is installed and configured on your PC. Then right-click the desired file and select Send to My Phone from the context menu. Additionally, configure the Copilot key for keyboards that have one from Settings > Personalization > Text input > Customize Copilot key on keyboard.

Note: Many new features are rolled out gradually and belong to different build versions. If you want to be the first to get features, you can turn On the toggle to get the latest updates as they are available via Settings > Windows Update. Please visit the Windows Insider Blog for complete details.

See you next month!

Tune into the new season of Tackling Tech for IT talk on all these topics.

We hope to see you back next month. And if you’re interested in getting a personal reminder, subscribe to Windows IT Pro Blog updates via RSS!

---

Continue the conversation. Find best practices. Bookmark the Windows Tech Community, then follow us @MSWindowsITPro on X and on LinkedIn. Looking for support? Visit Windows on Microsoft Q&A.