HomeNewsletterCommunityMVP FeedToolsArchiveBlogToday's NewsAboutServicesQuick Links Subscribe free
← Back to Blog
Windows 11 Windows 11Windows Update26H224H2End of ServicingIntuneLicensingWindowsLicensing CSP

Windows 11 24H2 Home and Pro Stop Getting Updates on October 14, 2026 - A Year Before Enterprise

IA
Imran Awan
1 September 2026

Windows 11, version 26H2 moved to the Release Preview channel on August 27, 2026, at build 26300.9278. That is the headline. The date buried inside the same announcement is the one worth acting on: Windows 11 24H2 Home and Pro reach end of servicing on October 14, 2026. Enterprise and Education editions of the exact same 24H2 build keep getting security updates for another full year, until October 13, 2027.

Same build number. Same servicing branch. A twelve-month gap in how long each edition is allowed to stay patched. If your estate has any device running Home or Pro on 24H2, that device is on a clock that most of your Enterprise fleet is not.

The short version

Windows 11 24H2 Home and Pro end of servicing is October 14, 2026 (6:59:59 AM PT). Windows 11 24H2 Enterprise and Education end of servicing is October 13, 2027 - a full year later, because they follow a different support-length tier under the same Modern Lifecycle Policy. After the Home/Pro date passes, those devices stop receiving security updates permanently unless the OS version or the edition changes. The TargetReleaseVersion policy that most fleets use to control feature-update timing does not apply to Home edition at all, so Home devices cannot be held on a supported version by policy - only by upgrading the edition or the OS version itself.

The problem: a green checkmark on a device that stopped being patched weeks ago

There is no error code for this one. That is what makes it dangerous.

A Windows 11 Home or Pro device sitting on 24H2 past October 14, 2026 does not throw a warning. Settings › Windows Update keeps showing the same screen it always has. Windows Update Compliance reports in Intune, if the device is even enrolled, keep showing the device as compliant against whatever update-ring deadline it last met - because the device is not failing a policy, it is simply no longer being offered anything to fail against. There is nothing left in the pipe for that edition, on that version, so the client checks in, finds nothing new, and reports back exactly what a healthy, fully-patched device reports.

Context: This is not unique to 24H2. Every past Windows 11 Home/Pro version has aged out the same quiet way: 21H2 on October 11, 2023, 22H2 on October 9, 2024, and 23H2 on November 12, 2025. Nobody notices at the time because the UI gives no signal. People notice eighteen months later when a CVE from the intervening period turns out to still be exploitable on a machine nobody flagged.

The devices most likely to be sitting on Home or Pro in a managed estate are exactly the ones least likely to be watched closely: personally-enrolled BYOD laptops, contractor machines bought off the shelf because procurement could not turn around an Enterprise-licensed device in time, meeting-room PCs, and any device where someone selected "Windows 11 Home" at setup because nobody told them to look for Pro.

Why it happens: one build, two support tiers

Windows 11 24H2, 25H2, and 26H2 share a single servicing branch. Since 24H2 shipped, each annual feature update has arrived as an enablement package - a small file that flips already-staged features on, rather than a full in-place upgrade. The practical result: the underlying binaries for 24H2 and 26H2 are largely the same files. What changes between them is which features are turned on, not the servicing lifecycle.

The lifecycle itself is decided separately, per edition, under Microsoft's Modern Lifecycle Policy. Home, Pro, Pro Education, Pro for Workstations, and SE get 24 months of servicing per annual release. Enterprise, Education, and Enterprise multi-session get 36 months. Same release, same code, different clock, and the clock starts on the same release date for every edition.

VersionHome / Pro end of serviceEnterprise / Education end of serviceGap
21H210/11/202310/9/2024~12 months
22H210/9/202410/15/2025~12 months
23H211/12/202511/11/2026~12 months
24H210/14/202610/13/2027~12 months
25H210/13/202710/11/2028~12 months

The pattern is consistent going back to launch: every Home/Pro release loses support almost exactly one year before the same release's Enterprise/Education edition does. 24H2 is not a special case. It is just the one whose deadline lands three weeks after this post is published.

Gotcha: "It's still receiving the monthly rollup" is not the same claim as "it's in support." A device can continue to install cumulative updates released before its edition's end-of-service date for a short tail after that date while patches already in the pipeline finish distributing, but no new security fix gets built for that edition/version pair once the date passes. Do not use "it installed something last month" as evidence a Home/Pro 24H2 device is fine.

How to verify: find every Home/Pro 24H2 device in the estate

Edition and version both live in the same registry key, so one read gets you both. This does not require the device to be domain-joined or Intune-enrolled - it works on any Windows 11 machine you can get a PowerShell session on.

Check-EditionServicingWindow.ps1
PS C:\> Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' | Select-Object EditionID, DisplayVersion, CurrentBuild, UBR EditionID DisplayVersion CurrentBuild UBR --------- -------------- ------------ --- Core 24H2 26100 4351

EditionID is the value that matters here. Core and CoreN mean Home. Professional and ProfessionalN mean Pro. Enterprise, Education, and EnterpriseS (the LTSC channel) are the ones with the longer clock. DisplayVersion confirms the feature-update version; CurrentBuild plus UBR together give you the exact build, useful for cross-checking against the 26300.9278 Release Preview number if you want to see how far behind the front of the queue a device actually is.

Doing this across a fleet takes two real steps, not one query. Intune's managedDevice Graph resource has no property for Windows edition at all - there is no skuFamily, no editionId, nothing. It tells you the build. It does not tell you Home, Pro, Enterprise, or Education. Step one narrows the fleet to "every 24H2 device." Step two adds edition on top of that shortlist.

Step one: every 24H2 device, straight from the admin center

No script needed for this part - the device list you already have open does this natively.

  1. Sign in to the Microsoft Intune admin center, select Devices, then All devices.
  2. Select Columns and add OS version and OS bucket if either is missing. OS bucket groups devices by feature-update version - Windows 11 23H2, 24H2, and so on - which is exactly the grouping this check needs.
  3. Sort or filter on OS bucket = Windows 11 24H2.
  4. Select Export. The CSV comes back with device name, primary user, compliance state, and last sync time for every matching device.
Note: That export has device name, primary user, compliance state, and last sync - the same fields Intune's own device list always has. It does not have edition, because nothing in the admin center's device list exposes that either. That is what step two is for.

Step two: which of those are Home or Pro

That export gets you every 24H2 device, but not which of them are Home or Pro - Intune's console does not show edition, and neither does Microsoft Graph. Edition lives in exactly one other place worth knowing about: the OSEdition field in Windows Update for Business reports, Microsoft's Azure Monitor-based reporting solution, if your organisation already has it turned on.

That is a big "if." Most fleets do not have this running, and standing it up just for one deadline is not worth it. So the realistic path for most readers is the same one already covered above: run the registry check by hand on the devices that came out of step one, or hand that shortlist to whoever runs your device compliance scripts and ask them to run it for you.

Tip: If your organisation already has any Windows Update reporting solution running - Windows Update for Business reports, Autopatch, or similar - ask whoever owns that dashboard whether OS edition is already a field they can see. It usually is, and it is a five-minute cross-check for someone who already has that access, not a new report to build.

The fix: move the version, or move the edition

There are exactly two ways off this clock: get the device onto a version that still has runway left on Home/Pro's 24-month tier (25H2 or 26H2), or move the device to an edition that has 36 months instead of 24. Which one is realistic depends entirely on what licensing the device already has behind it.

  1. Run the inventory above first. You cannot fix what you have not counted, and this is the one step every remediation path depends on.
  2. For devices with no Enterprise/Education entitlement behind them: push the 25H2 or 26H2 enablement package. Because it is the same servicing branch, this is a single restart, not a full upgrade cycle - the fastest way to buy back another 24 months on the Home/Pro tier without touching licensing at all.
  3. Control feature-update timing with the TargetReleaseVersion policy - Pro only, not Home:
    • CSP / Intune: ./Device/Vendor/MSFT/Policy/Config/Update/TargetReleaseVersion, paired with the ProductVersion node. Supported on Pro, Enterprise, Education, and IoT Enterprise/LTSC.
    • Group Policy: Computer Configuration › Administrative Templates › Windows Components › Windows Update › Manage updates offered from Windows Update › Select the target Feature Update version.
  4. For Home devices specifically, skip step 3 entirely. There is no policy lever. Home has no Local Group Policy Editor, and the TargetReleaseVersion CSP's own applicability table does not list Home as a supported edition. A Home device will take whatever version Windows Update decides to offer it, on Windows Update's own schedule, with no admin override.
  5. Where the entitlement exists, upgrade the edition instead of the version. The WindowsLicensing CSP's UpgradeEditionWithProductKey node (./Vendor/MSFT/WindowsLicensing/UpgradeEditionWithProductKey) takes a 29-character product key from the Volume Licensing Service Center and runs changepk.exe against it. It reboots automatically to complete.
Warning: Check the upgrade path before you push a key. Microsoft documents four valid paths through this CSP: Enterprise → Education, Home → Education, Pro → Education, and Pro → Enterprise. Home to Enterprise directly is not a listed valid path. A Home device that needs to end up on Enterprise has to go through Pro first (a retail or Store edition upgrade), then Pro to Enterprise through this CSP. Home to Education, by contrast, is a single hop if an Education entitlement is what you actually have.

For the devices that turn up on Home with no Enterprise/Education/Pro entitlement anywhere and no realistic path to one - genuinely personal BYOD hardware - the honest fix is not a technical one. Flag them in whatever conditional access or compliance policy already gates access for unmanaged devices, and treat "runs Windows 11 Home" the same way you would treat any other unpatchable-by-policy device category.

Proof it worked: a fleet with no edition sitting past its own deadline

Re-run the same Intune export after remediation, filtered the same way - OS bucket = Windows 11 24H2 - and check edition on whatever came back the same way you did the first time. Watch version and edition together, not separately: a device that moved from 24H2 to 25H2 but is still Home edition has only bought itself until October 13, 2027, not solved the underlying gap.

The target state is that filter returning nothing at all.

Zero rows is the target state, not a device count that merely went down. Anything still showing up here on the day after your own internal deadline is a device that either has no path to a longer-lived edition, or has one you have not actioned yet - both are worth a name attached to them before October 14.

References

Related on EndpointWeekly

Was this post helpful?
React below — no account needed
Share this post
LinkedIn X / Twitter Reddit Bluesky

More from EndpointWeekly

Windows 11
The Enablement Package: How 24H2 Becomes 25H2 in a Reboot (and…
Windows 11 24H2 and 25H2 share one servicing branch and one identical set of system…
Windows 11
Windows 11 26H2 with Intune: Readiness, Enablement Package and…
Windows 11 26H2 has not reached General Availability - it is Insider-only as of this…
Windows 11
The WinRE partition is too small: 0x80070643 and the…
A Windows Recovery Environment servicing update fails with 0x80070643 and admins chase…