Skip to content

Endpoint & devices this week: 3 changes (31 October 2026)

Three confirmed Windows and Intune changes from the week to 31 October 2026. The nearest date: Windows 11 version 23H2 Enterprise and Education stop getting updates on 10 November 2026.

This is our weekly Endpoint & devices roundup. It was due on Friday 30 October and is published a day late. Every item comes from a primary source read on 31 October 2026.

Already briefed

  1. Windows and Edge removed seven eMudhra root certificates on 26 and 27 October 2026. Endpoint and PKI admins: make sure trust-list updates reach disconnected devices and replace certificates that chain to eMudhra. Brief: Windows and Edge drop seven eMudhra roots. Source: MC1529467.

New this week

Windows 11 23H2 Enterprise and Education: end of updates on 10 November 2026

Microsoft's 30-day reminder: "Windows 11, version 23H2 Enterprise and Education editions reach end of updates on November 10, 2026". Windows Server 2016 and Windows 10 Enterprise LTSC 2021 reach end of updates on 12 January 2027.

  • Who acts: endpoint admins.
  • Check: Intune admin center > Devices > Windows, filter by OS version 10.0.22631. Those devices need a feature update ring to 24H2 or later before 10 November. List Server 2016 hosts now for January.
  • Source: Windows message center (reminders of 9 and 14 October 2026).

Intune 2610: Administrator protection settings and a GA template for Defender agent runtime protection

"Microsoft Intune now includes two Administrator protection settings in endpoint security Account protection policies." The "endpoint security template for Microsoft Defender for Endpoint agent runtime protection settings is now generally available." Windows message center (13 October): Administrator protection is turned on by default in the Windows 11 security baseline.

More: all Endpoint & devices news · Microsoft 365 security deadlines.

Last reviewed: 31 October 2026. Runbook Lab is not affiliated with Microsoft.