Windows 11 changes coming in 2025H2

As the world moves away from Windows 10, and enter the Windows 11 as a standard PC operating system, Microsoft continues to move forwards improving the platform in the name of security. the last set of announced update include:

1) Microsoft has announced Windows 11, version 25H2, now available in preview for Windows Insiders, with a broad release planned for the second half of 2025. Although announced in November 2024, a significant change called Administrator Protection will now requires all users—including the only user on a PC—to verify their identity (such as with Windows Hello) before performing any action that requires administrator privileges, like installing software or changing system settings. This feature will be enabled by default across all Windows 11 editions: Home, Pro, Enterprise, and Education. In short, even if you’re the only user, you will no longer have seamless, always-on admin rights—elevated actions will require explicit authentication for each task, improving overall security

• Instead of always operating with full admin rights, your session will use “just-in-time” admin privileges with an isolated admin token granted only for specific elevated tasks; the token is destroyed after each task, reducing persistent risks.
• Auto-elevation is no longer available; users will see more prompts when admin access is required, aiming to reduce the risk of malware or accidental system changes.
• This approach is designed to safeguard against threats like token theft and unauthorized changes, following a modern “least privilege” model even for individual or home devices.
• Developers are advised that files and settings created during elevated sessions may use a temporary, isolated system-managed admin account, potentially affecting where data is stored and how customizations are applied.

• Additional changes coming to this version include:
  • Enablement Package Update: 25H2 is delivered as a small enablement package (eKB) for devices already on 24H2, enabling a fast, low-impact upgrade with a single reboot.
  • Shared Servicing Branch: Both 24H2 and 25H2 use the same source code branch; new features are unlocked in 25H2 without a full OS reinstall.
  • Improved Update Experience: Upgrades offer reduced downtime and increased reliability during the update.
  • Support Lifecycle Reset: Upgrading to 25H2 resets the support lifecycle—36 months support for Enterprise/Education editions and 24 months for Pro/Home editions.
  • Compatibility Maintenance: New features are designed to maintain broad compatibility across device hardware.
  • Update Requirements: Devices running versions earlier than 24H2 must perform a traditional feature update process to move to 25H2.
  • New Features and Improvements: The update includes various new capabilities—such as AI-powered enhancements, UI refinements, and updated productivity tools (specifics may be detailed in other announcements).

2) Windows 11 will increasingly manage application updates centrally aiming to streamline the experience for both consumers and IT administrators. Traditionally, Windows handled operating system, driver, and firmware updates, while application updates—especially for apps not downloaded from the Microsoft Store—relied on their own mechanisms or separate management tools. This resulted in fragmented update experiences and resource inefficiencies that resulted, most notably, in a terrible end-user experience when installing a new computer.

• Microsoft’s unified update orchestration platform for application updates on Windows 11 is currently in the private preview stage as of late May 2025. 
• Microsoft is building a native orchestration platform to coordinate app updates with system, driver, and firmware updates via a consistent API.
• Microsoft Store apps continue to update autonomously; the platform supplements and enhances overall update consistency.
• For enterprises and IT, the platform simplifies update policy alignment, reduces complexity and bandwidth spikes, lowers support costs, and improves visibility and control.
• When you install Windows 11, version 24H2 using media refreshed in or after June 2025, the system will have the newer versions of apps out-of-the-box. By refreshing inbox apps to newer versions, Microsoft is addressing security vulnerabilities present in older app releases.

As of this writing: 7/17/2025 the current version of Windows 11 information follows:

References:

• See also my Windows 10 End-of-Life Series
• Microsoft Unveils Unified Update Orchestration Platform for Windows 11 | Windows Forum
• Administrator protection on Windows 11 | Microsoft Community Hub
• YouTube Video: Windows 11 25H2 build 26200.5702: NEW Security, AI, Redesigned Dialogs, More Features (Dev)

Do you have ideas of comments?

Please let me know! Send me a note to my X account: @jorper98