Microsoft’s Forced Upgrades: Unmanaged Windows 11 24H2 PCs Under Fire

Microsoft has initiated the process of automatically upgrading unmanaged devices operating on Windows 11 24H2 Home and Pro editions to Windows 11 25H2 starting this week.

As per the information on Microsoft’s Lifecycle Policy site, Windows 11 24H2 is scheduled to reach the end of its support in approximately six months, specifically on October 13, 2026.

The latest update known as Windows 11 25H2, also referred to as the Windows 11 2025 Update, started rolling out in September to eligible devices running on Windows 10 or Windows 11. This update is considered a minor one and is installed through enablement packages that are less than 200 KB in size.

Microsoft mentioned in a recent update to the Windows release health dashboard that the intelligent rollout based on machine learning has now been extended to all devices running Home and Pro editions of Windows 11, version 24H2, that are not managed by IT departments.

These devices will no longer receive fixes for known issues, time zone updates, technical support, or monthly security and preview updates containing protections from the latest security threats. They will automatically receive the update to Windows 11, version 25H2 when it becomes available, without any action required from the users.

For users who prefer not to wait for the automatic upgrade, they can manually check for the update’s availability in Settings > Windows Update and proceed to download and install Windows 11 25H2.

If users are not ready to upgrade, they have the option to pause updates from Settings > Windows Update by selecting a specific time period to pause them. However, it is essential to install the latest updates after the pause duration has elapsed.

Microsoft has also provided a support document and a step-by-step guide to assist users in resolving any issues encountered during the Windows 11 25H2 upgrade process.

Following the release of the March 2026 Patch Tuesday updates, Microsoft has issued several emergency updates, including addressing a known issue that was causing sign-in problems with Microsoft accounts across various Microsoft applications such as Teams and OneDrive.

Additionally, out-of-band updates were released for hotpatch-enabled Windows 11 Enterprise devices to fix a Bluetooth device visibility issue and security vulnerabilities in the Routing and Remote Access Service (RRAS) management tool.

Automated pentesting has proven the existence of vulnerabilities, while BAS determines whether your controls can prevent them. Many teams focus on one aspect without considering the other.

This whitepaper outlines six validation surfaces, highlights where coverage may be lacking, and offers three diagnostic questions for evaluating any security tool.

Get Your Copy Now