Microsoft endpoint and server readiness: October 2026

Prioritize the deadlines correctly

• October 13: Windows 11 24H2 Home/Pro ends servicing. Office 2021 and Office LTSC 2021 families, Windows 10 2016 LTSB, and Windows Server 2012/R2 ESU Year 3 reach end of support.
• October 13: Windows Server 2022 moves to Extended Support; it does not reach end of support. Security updates continue, while non-security support becomes limited and paid.
• November 10: Windows 11 23H2 Enterprise/Education receives its final monthly security update.

Export a version-and-edition inventory now. Assign an upgrade, replacement, retirement, or time-limited exception to each affected asset and retain approval and validation evidence.

Control the configuration changes

• The Windows 11 26H2 Intune security baseline is available, but existing baseline profiles do not update automatically. Export current assignments and customizations, review changed defaults, pilot, then deploy in rings with stop criteria and rollback ownership.
• RD Web Access can fail when managed Edge or Chrome policy disables XSLT. Identify dependencies and test them before browser-policy rollout. Prefer the HTML5 web client where practical; treat temporary XSLT or IE-mode use as an owned, expiring security exception.
• Keep supported Windows devices current so replacement Windows Update certificates are installed before their May or June 2027 expiry dates. Record patch evidence by OS family. Microsoft says WSUS-serviced devices are not affected by this certificate change.

Microsoft sources

• Products ending support in 2026 — lifecycle dates and Extended Support distinction.
• What's new in Microsoft Intune — week of October 5, 2026; Windows 11 26H2 baseline.
• Windows message center — October 8–9 announcements.
• Microsoft Support KB5130994 — RD Web Access symptoms and temporary workarounds.

Verify current Microsoft guidance and the customer's approved configuration before changing production policy or software.