Windows 11 25H2 Release Preview: Enablement Package and Enterprise Changes

Microsoft has moved the next annual Windows 11 update — Windows 11, version 25H2 (Build 26200.5074) — into the Release Preview testing ring, opening the final validation window for Insiders and commercial pilots ahead of a broader public rollout later this calendar year. The update is not a full OS rebase but is being delivered as a small enablement package (eKB) on top of the existing 24H2 servicing stream, which means most of the code has already been staged in monthly cumulative updates and will be activated on updated systems with a short download and typically a single restart. The drop also surfaces practical enterprise changes — most notably the removal of legacy management tooling such as PowerShell 2.0 and WMIC, and new admin controls to remove selected inbox Microsoft Store apps on managed devices — items organizations should validate now during Release Preview.

---

Overview​

Where we stand now​

Microsoft announced on August 29, 2025 that Windows 11, version 25H2 is available to the Release Preview channel for Windows Insiders, identifying the near-final preview build as Build 26200.5074. That announcement explicitly states the update will be delivered as an enablement package layered over the 24H2 servicing branch and signals that the product is production‑adjacent — suitable for validation and managed pilots prior to broader availability later this year.

Why this release matters​

The 25H2 release reflects Microsoft’s servicing evolution: rather than shipping a monolithic feature rebase, Microsoft stages feature binaries in the servicing stream and flips them on with a tiny enablement package. The practical outcome is faster installs, smaller downloads for already-patched devices, and a shared servicing branch that simplifies monthly patching across 24H2 and 25H2 devices. For enterprises this reduces downtime and logistical friction — provided IT teams treat Release Preview as the start of formal validation and remediate known compatibility items.

---

What 25H2 actually delivers​

Incremental polish, not a revolution​

Expect incremental UX improvements, manageability refinements, and polished Copilot-era surfaces rather than a dramatic UI overhaul. The public preview and community snapshots show a focus on quality, security hardening, and targeted feature rollouts rather than one marquee consumer-facing change. This approach matches Microsoft’s stated intent to prioritize reliability and operational readiness over spectacle.

Notable user-facing changes reported in preview builds​

• Start menu refinement and layout adjustments, including a wider layout and reorganized “All apps” behaviour.
• File Explorer updates (better dark-mode handling and UI responsiveness).
• Notification Center and multi-monitor clock improvements (secondary monitor clocks showing seconds).
• Continued rollout of Copilot/on-device AI surfaces: Click to Do image actions, selection improvements, and selective AI-driven Explorer features (hardware- and license-gated).

These items are visible in early preview notes and community coverage; however, many AI features remain gated depending on hardware capability (Copilot+ NPUs) and licensing entitlements such as Microsoft 365 Copilot. Validate expectations for each cohort of devices accordingly.

---

The enablement package model explained​

Technical mechanics​

Under the enablement package (eKB) model, Microsoft ships the necessary feature binaries across the servicing stream in monthly cumulative updates (LCUs) while keeping those features disabled by default. When it’s time for the annual release, Microsoft publishes a small enablement package that flips feature flags from “off” to “on,” converting a device running 24H2 into 25H2 with a small download and usually a single restart. The binary set remains largely identical between 24H2 and 25H2, which is why Microsoft will service both versions with the same monthly cumulative updates.

Operational benefits​

• Much shorter downtime: Upgrades from 24H2 to 25H2 often complete after a single restart, reducing user disruption.
• Smaller delivery surface: Organizations don’t need to re-image devices en masse; they can enable features using the eKB or deploy ISOs for clean installs where needed.
• Simplified patching: Because both versions share the same servicing branch, monthly quality updates cover the same binary set, cutting back on differential validation across versions.

Caveat — activation still changes runtime behaviour​

Although binaries are present, flipping feature flags can change runtime characteristics. Driver interactions, third‑party agents, security agents, and scripted assumptions can behave differently once features are enabled. The Release Preview is therefore the final validation opportunity for administrators to catch subtle regressions.

---

Enterprise impact: what IT teams must check now​

High‑priority compatibility items​

• PowerShell 2.0 removal — PowerShell v2 is being removed from shipping Windows images; Microsoft recommends migrating scripts to PowerShell 5.1 or PowerShell 7+. Any automation that explicitly invokes PSv2 must be identified and updated.
• WMIC (Windows Management Instrumentation command-line) removal — WMIC is deprecated and will no longer be present in the shipping image; convert WMIC-based scripts to PowerShell CIM cmdlets (Get-CimInstance, etc.) or the programmatic WMI APIs.
• Third‑party agents and drivers — Validate Endpoint Protection, backup agents, monitoring tools, and storage drivers against the enabled feature set to avoid post-activation regressions.

New enterprise controls​

25H2 introduces a Group Policy / MDM Configuration Service Provider (CSP) that allows IT admins on Enterprise and Education SKUs to remove selected preinstalled Microsoft Store apps (inbox apps) during imaging/provisioning. This addresses image hygiene and reduces baseline noise for corporate devices, but it must be tested in pilot imaging flows because provisioning behavior can vary.

Distribution and validation channels​

Release Preview availability is deliberately the final validation gate. Microsoft recommends using:

• Windows Update for Business (WUfB) for controlled, staged deployment rings;
• WSUS for managed on-prem patch distribution;
• Azure Marketplace images and official ISOs for lab validation and clean installs.
  Start pilot waves now and measure telemetry carefully.

---

Upgrade paths and technical guidance​

Who gets the eKB and how to obtain it​

• Insiders in the Release Preview channel can “seek” the optional 25H2 offer via Settings → Windows Update and apply the enablement package to move from 24H2 to 25H2.

Recommended pre-rollout checklist (short)​

• Inventory scripts and tools that call powershell.exe -Version 2 or wmic.exe.
• Convert WMIC and PSv2 scripts to modern PowerShell (CIM/WMI cmdlets, PowerShell 7+) in source control.
• Build lab ISOs and image a representative pilot cohort.
• Validate EDR, backup, and vendor-supplied drivers on pilot devices.
• Test the Remove Default Microsoft Store Packages policy in provisioning workflows and capture AppxDeployment event logs.
• Prepare rollback procedures (VM snapshots, documented eKB uninstall paths) and test them.

Rollback realities​

Remember that combined servicing components (SSU+LCU packaging) can complicate automated rollback. Thoroughly test the documented eKB uninstall path in your lab and ensure VM snapshots or other rollback mechanisms are available for pilot waves.

---

Security and manageability: real gains​

Reduced attack surface​

Removing legacy runtimes like PowerShell 2.0 and deprecated tools like WMIC reduces potential attack vectors and nudges organizations toward modern, auditable tooling. This is an operational security win for teams willing to allocate the remediation effort up front.

Administrative hygiene​

The new Group Policy/MDM CSP to remove preinstalled Store apps helps produce cleaner, easier-to-manage images for Enterprise and Education devices. This reduces support noise and speeds user provisioning where default inbox apps are seen as bloat. Validate provisioning in the lab to ensure predictable end-user experiences.

---

Copilot-era features: capability and fragmentation​

Hardware and licensing gating​

Many of the AI-driven features and Copilot experiences announced over the previous servicing months remain hardware-gated (Copilot+ PCs with on-device NPUs) or license-gated (Microsoft 365 Copilot entitlements). That means the visible feature set will vary across a fleet: some devices will show advanced on-device image edits and Click to Do actions, while others will not. Administrators should set user expectations accordingly and document feature availability per device class.

Operational consequences​

Feature fragmentation complicates support and documentation. Helpdesk scripts, training materials, and knowledge-base articles must reflect this variability so agents aren’t chasing phantom features on non‑Copilot+ hardware. Build inventory reports that include hardware capability and license entitlements before broad rollout.

---

Risks, unknowns, and things to watch​

Top practical risks​

• Legacy automation breakage: Organizations with scripts or agents depending on PSv2 or WMIC will experience functional failures if these components are removed and not remediated. The remediation cost is finite but real.
• Vendor lag: Vendors may delay updated agents or drivers for new feature activations, creating support headaches during early waves. Validate vendor timelines and coordinate pilot testing windows.
• Feature fragmentation and documentation drift: Hardware- and license-gated AI features create inconsistent user experiences across the estate, increasing support overhead.

What remains unverifiable right now​

• Microsoft’s exact general availability (GA) date for broad consumer rollout is described as “later this calendar year” in the Release Preview announcement; Microsoft did not publish a single fixed GA date at the time of Release Preview publication. Community coverage and vendor signals commonly point to a September–October timeframe, but that remains an expectation rather than a confirmed date. Treat any specific date reported in community outlets as provisional until Microsoft posts the GA announcement.

---

A practical rollout playbook (detailed)​

• Inventory (Day 0–7):
• Scan for wmic.exe calls and powershell.exe -Version 2 in scripts, scheduled tasks, and old installers. Produce a prioritized remediation list.
• Remediation sprints (Day 7–21):
• Migrate WMIC scripts to Get-CimInstance/CIM cmdlets.
• Update PowerShell v2 scripts to PowerShell 5.1 or PowerShell 7+.
• Validate and version-control changes.
• Build lab ISOs and images (Day 14–28):
• Use Microsoft’s staged ISOs and Azure Marketplace images to build representative test images and to validate provisioning behaviours with the new policy that removes default Store apps.
• Pilot cohort (Day 28–42):
• Deploy to a small, representative set of endpoints via WUfB/WSUS. Validate EDR, backup, storage, and vendor tooling. Capture telemetry and user-facing regressions.
• Scale rings and production rollout (Day 42+):
• Expand rollout in controlled rings only after pilot telemetry is judged acceptable. Keep rollback snapshots handy and ensure support teams are briefed on notable changes (e.g., missing WMIC output).
• Communicate to end users:
• Explain the scope (polish and manageability improvements), set expectations for AI features (may be absent on many devices), and give guidance on the short restart window. Clear comms reduce helpdesk volume.

---

Strengths vs. risks — a balanced assessment​

Strengths​

• Operational efficiency: The eKB model materially reduces upgrade downtime and simplifies patching across versions.
• Security posture: Removing outdated runtime surfaces and limiting inbox bloat via admin controls modernizes the platform baseline.
• Predictability for large fleets: Unified servicing reduces divergent testing matrices and long-term validation overhead.

Risks​

• Compatibility hits for legacy automation — the removal of PSv2 and WMIC will break unremediated scripts, creating real operational friction.
• Fragmented AI experiences — hardware and licensing gates will produce an uneven feature set across devices and complicate support and user education.
• Vendor update lag — if key third-party agents lag in compatibility testing, early adopters may face increased incident volumes.

---

Final recommendation for IT leaders​

Treat the Release Preview as the start of formal validation, not a green light for mass deployment. Prioritize the following actions immediately:

• Run a short, focused scan for PSv2/WMIC dependencies and schedule remediation sprints.
• Build and validate lab ISOs and pilot cohorts via WUfB/WSUS.
• Coordinate with key ISV vendors for updated agents and drivers, and reserve rollback snapshots during pilot waves.

For enthusiasts and power users, the path is straightforward: opt into the Windows Insider Release Preview channel, seek the optional 25H2 offer in Windows Update, and test on non‑critical hardware. The eKB install should be fast for updated 24H2 machines, but validation remains essential.

---

Conclusion​

Windows 11, version 25H2 is deliberately pragmatic: an operationally focused, low‑friction annual update that prioritizes manageability, security hardening, and measured AI rollouts rather than headline-grabbing consumer features. The Release Preview availability and the enablement package delivery model make it easier for IT teams to pilot and adopt the update with minimal downtime, but the release also forces a real, unavoidable conversation about legacy automation and vendor readiness. Organizations that inventory, remediate, pilot, and stage the rollout in rings will convert Microsoft’s enablement-package promise into a tangible operational advantage; those that delay will risk surprises when the feature flags are flipped. Validate now — the final test window is open.

---

Source: heise online Windows 11 25H2 takes the final step before release to all
Source: Softonic Microsoft announces one of the most anticipated Windows updates to date - Softonic