Windows 11 23H2 End of Support: Enterprise and Education Get Final Patch November 10

The dates, by edition​

Microsoft's Windows 11 release information page lists 23H2 as generally available on October 31, 2023, with build family 22631. The Home, Pro, Pro Education and Pro for Workstations column already shows "End of updates." The column for Enterprise, Education, IoT Enterprise and Enterprise multi-session shows 2026-11-10. The 23H2 status page says the same: Windows 11, version 23H2 Enterprise and Education editions will reach end of updates on November 10, 2026, and Home and Pro editions reached end of updates on November 11, 2025.

The longer runway follows from Microsoft's servicing rules. Each annual feature update gets 24 months of support on the Home and Pro family and 36 months on Enterprise and Education. Lansweeper's lifecycle tracker puts it the same way: the Home and Pro editions have a servicing timeline of 24 months, and the Enterprise and Education and IoT Enterprise editions 36 months.

IoT Enterprise follows the same schedule. Microsoft's "What's new in Windows 11 IoT Enterprise, version 23H2" page lists build 22631, a start date of 2023-10-31 and an end of servicing date of 2026-11-10.

Summary: Home and Pro machines on 23H2 have had no security updates for a year. The four enterprise-type editions have one Patch Tuesday left.

November's patch is the last one​

The October 13, 2026 security update for 23H2 (KB5126653, OS Build 22631.7652) carries this notice: Windows 11, version 23H2 Enterprise and Education will reach end of updates on November 10, 2026. The November 2026 Windows security update will be the last update available for these editions. November 10 is the second Tuesday of the month, so the final cumulative update and the cutoff arrive on the same day.

The newest 23H2 entry in Microsoft's release history is an out-of-band (OOB) update: KB5134130, build 22631.7654, dated October 26, 2026 and labelled "2026-10 OOB." It is a dated release, not the final patch, and it doesn't change the deadline. The last update for these editions is still the November 10 security release.

After that, Microsoft says, devices running these editions will no longer receive monthly security updates containing protections from the latest security threats. TheTechHacker put it more bluntly: "Any new hole found after November 10 stays open on 23H2."

What doesn't happen is a shutdown. Windows Report's coverage of the 60-day reminder notes that this does not mean Windows 11 23H2 will suddenly stop working on November 10. The PCs keep booting. They just stop getting security fixes, so they become more exposed with each Patch Tuesday they miss.

Microsoft's own pages disagree by a day​

If you check Microsoft's dedicated product lifecycle page for Windows 11 Enterprise and Education, you'll see a different date. It lists the 23H2 end as "11/11/2026 6:59:59 AM" Pacific Time. The IoT Enterprise lifecycle page also shows November 11.

Meanwhile, these Microsoft sources all say November 10:

• the release information table
• the IoT Enterprise 23H2 documentation
• the Windows message center reminders
• the KB5126653 release notes

WindowsForum's earlier coverage spotted the same split. It noted that Microsoft's lifecycle page for Windows 11 Enterprise and Education gives a slightly different end date and recorded the lifecycle page end timestamp (23H2): November 11, 2026 at 6:59:59 AM Pacific Time.

Microsoft hasn't explained the difference. The early-morning timestamp looks like a "support ends just before this moment" convention rather than an extra day of patches, but that's our reading, not something Microsoft has said. In practice it changes nothing: the last patch ships November 10, and Microsoft's notices don't promise anything for 23H2 Enterprise or Education after that.

The same one-day mismatch appears for 25H2. The message center reminder gives October 11, 2028 for 25H2 Enterprise and Education, while the release information table shows 2028-10-10. If your compliance reports need an exact date, record which Microsoft page it came from.

Step one: check the edition, then the version​

Because the deadline depends on the edition, "23H2" alone doesn't tell you whether a PC is supported. Two built-in Windows tools are enough to check:

• Run winver from Start or the Run dialog (Win+R). It shows the version, such as "Version 23H2", and the OS build. A build that starts with 22631 means 23H2.
• Open Settings > System > About. Under Windows specifications you'll see the Edition (Home, Pro, Enterprise, Education and so on) and the Version.

Then sort the result:

• Home, Pro, Pro Education or Pro for Workstations on 23H2: unsupported since November 11, 2025. Upgrade now.
• Enterprise, Education, IoT Enterprise or Enterprise multi-session on 23H2: install the November 10 security update, then move to a supported release as soon as you can.
• Anything already on 24H2, 25H2 or 26H2: this deadline doesn't apply, but your version has its own date. 24H2 Home and Pro reached end of updates on October 13, 2026, according to Microsoft's message center.

For larger fleets, Microsoft's release information page says administrators can pull the same lifecycle data programmatically through the Windows Updates API in Microsoft Graph. That beats checking machines one at a time.

Where to go next​

Microsoft's specific advice for this group is 25H2: "To continue receiving monthly security and quality updates, we recommend updating eligible devices running Windows 11, version 23H2 Enterprise and Education editions to Windows 11, version 25H2." The release table gives 25H2 Enterprise/Education/IoT Enterprise support until 2028-10-10. 26H2, released 2026-09-29, runs to 2029-10-09 for the same editions.

One limit on 26H2 applies to anyone tempted to skip ahead. Microsoft says 26H1 is only for new devices and "has a longer support window" but can't be installed as an in-place update on existing hardware. IoT Enterprise isn't supported on 26H1 at all.

In practice:

• For a single eligible device, Microsoft says to go to Settings > Windows Update and select Check for updates. If your device is ready for the update, you'll see the option to Download and install. The wording is conditional, so not every PC will see the offer right away.
• For IoT Enterprise (non-LTSC), Microsoft's 23H2 documentation lists Windows Update, Windows Server Update Services (including Configuration Manager), Windows Update for Business and the Volume Licensing Service Center as delivery channels.
• Expect a full feature update. 23H2 is build 22631, while 25H2 and 26H2 are on the 26100-family codebase (26200 and 26300). Going from 23H2 to either is a full OS upgrade, not a quick enablement-package switch. Earlier WindowsForum reporting confirmed that 23H2 cannot use the 26H2 enablement package. Allow for longer install times, app compatibility testing and a pilot group before a broad rollout. This planning advice comes from general deployment experience, not a Microsoft directive.

There's also the hardware question. Microsoft keeps saying "eligible devices," and some machines on 23H2 may be there because something blocked an earlier upgrade, such as a driver, an app or a hardware limit. Find those devices this week rather than discovering them in December.

Why so many PCs are still on 23H2​

Who stays on a two-year-old Windows release? Usually organizations whose change-control process moves slower than Microsoft's annual cadence. That includes schools that upgrade only in the summer, factories running IoT Enterprise images on validated line equipment, and VDI farms built on Enterprise multi-session images nobody wants to rebuild.

Neowin summed up the timeline: Enterprise and Education stayed supported for an additional year, and that extra year is now almost up. Microsoft sent 90-, 60- and 30-day reminders, so this deadline shouldn't surprise anyone.

To be fair to the laggards, three years of support per release is generous, and a full feature update on validated or kiosk hardware isn't trivial. Still, Microsoft's annual cadence means the deadline comes back every year. Moving to 25H2 or 26H2 now buys about two to three years before you do this again.

Bottom line: Check each PC's edition before its version. Home and Pro on 23H2 have been unsupported since November 2025. Enterprise, Education, IoT Enterprise and multi-session devices get their last patch on November 10, 2026, and should move to 25H2 or 26H2 after that.

Correction (November 8, 2026): The cover image incorrectly shows November 12, 2024 as the Home and Pro end-of-support date. The correct date is November 11, 2025, as stated in the article text. (November 12, 2024 was the end date for 22H2 Home and Pro.)