HomeNewsletterCommunityMVP FeedToolsArchiveBlogToday's NewsAboutServicesQuick Links★ Pro Subscribe free
← Back to Blog
Windows Update Windows 1126H2Release PreviewWindows Update for BusinessIntuneAutopatchAutopilot

Windows 11 26H2 Is Now in Release Preview: How to Test and Prepare Your Intune Environment Before GA

IA
Imran Awan
28 August 2026

On 27 August 2026, Microsoft moved Windows 11, version 26H2 into the Release Preview channel as build 26300.9278. That sounds like routine Insider chatter, but it is not. Every previous milestone for 26H2 - the Dev and Beta channel builds, the earlier Insider flights - was aimed at enthusiasts testing pre-release code on throwaway hardware. Release Preview is different: it is the channel Microsoft explicitly tells commercial customers to use for validating a build before it becomes generally available. The Windows Insider blog post announcing this says as much: organizations can now deploy 26H2 through Windows Update client policies or WSUS and validate it against their own environment ahead of GA.

That is a real change in what "prepare for 26H2" means this week. Until yesterday, an IT admin's options were either wait, or run 26H2 on a handful of Insider-enrolled test devices with no formal support path. From now until general availability - expected later in 2026 - there is a supported, low-effort way to validate 26H2 in your own environment before a single production device touches it: know which upgrade path actually applies to your fleet, pilot it safely, and understand your rollback window before you commit.

Watch this post — YouTube walkthrough

Watch on YouTube · Subscribe at @EndpointWeekly

The short version

Windows 11 26H2 (build 26300.9278) entered the Release Preview channel on 27 August 2026, and Microsoft is explicitly inviting commercial validation ahead of general availability. Which upgrade mechanism applies depends entirely on what a device is running today: 24H2/25H2 devices take a ~174 KB enablement package with one restart, 23H2-and-older Windows 11 devices take the full ~6.5 GB feature-update media, and Windows 10 devices need a full upgrade or replacement outright. Before GA, you can pilot the eKB path safely by enrolling a small ring in the Release Preview branch (BranchReadinessLevel) - and you should understand your rollback window before you widen the ring. None of this requires new tooling - it uses the update-ring and Windows Update mechanisms you already run every day.

The problem: Release Preview changes the calculus, and the seeker experience can act before you decide

Here is the specific situation as of 27 August 2026. Windows 11 26H2 build 26300.9278 (KB5120998) is live in the Release Preview channel. For devices already on 24H2 or 25H2, it installs as an enablement package: roughly 174 KB, one restart, no new files to copy down because the 26H2 code has already been sitting dormant inside your monthly cumulative updates for months. Microsoft's own framing is that this unlocks features that were already present but switched off for commercial devices - Windows Settings Backup, app-specific taskbar actions, and a set of File Explorer changes - rather than introducing a new codebase to test from scratch.

The part that catches admins out is the Release Preview channel's seeker experience. Any device enrolled in Release Preview that meets Windows 11 hardware requirements will now offer 26H2 through Windows Update of its own accord, the same way it offers a monthly cumulative update - it does not wait for you to request it. If you have Insider-enrolled devices in your estate (test VMs, a lab, a pilot group left over from an earlier Autopilot proof-of-concept) and you have not explicitly pinned their target feature-update version, some of them may already be sitting on 26H2 without anyone deciding that on purpose.

Diagram showing that a Release Preview device with TargetReleaseVersion pinned stays put, while an unpinned device gets 26H2 automatically via the seeker experience
Note: An enablement package (eKB) is not a separate installer - it is a small package that flips a set of feature flags already present in the shared code, then reports the new version number. If you want the deep mechanics of how eKBs work under the hood (registry-backed feature staging, the CBS pipeline, why the file payload is so small), the earlier post on enablement package mechanics covers that in full. This post assumes that background and focuses on the validation work in front of you right now.

Why it happens: the 24H2/25H2/26H2 shared servicing branch and the enablement package

The reason a feature update can arrive this small and this fast is the shared servicing branch. Microsoft's own whitepaper on the shared servicing model lays out the mechanism: 24H2 (build 26100), 25H2 (build 26200) and 26H2 (build 26300) are all developed from the same underlying branch. Rather than building three separate operating systems, Microsoft ships one shared code line and layers version-specific feature flags on top of it. A device running 24H2 or 25H2 already has almost everything 26H2 needs sitting inertly in its own installed binaries - delivered to it over the preceding months as ordinary cumulative updates. The eKB's only job is to flip those flags on and update the reported build number.

This is exactly why Release Preview validation is realistic to do properly in days, not weeks. You are not testing a new kernel, a new driver model, or a new update engine - you are testing whether a specific set of features your organization has never had turned on before behaves correctly against your existing environment. The risk surface is narrow and known. That is also why Microsoft is comfortable inviting commercial validation this early: the underlying OS has already been running in production, unchanged, for months.

Microsoft diagram showing how updating from one Windows version to another depends on which servicing branch it belongs to
From Microsoft's own shared servicing model whitepaper: whether a version bump is a small eKB or a full OS swap depends entirely on whether the two versions share a branch. 24H2/25H2/26H2 share one; 21H2 and 22H2/23H2 did not.

Put plainly, this determines which of four paths applies to a given device when 26H2 arrives:

Windows 11 26H2 upgrade paths: 24H2/25H2 take an enablement package, 23H2 and older take full media, 26H1 is a separate branch, Windows 10 needs a full upgrade or replacement

For the full mechanics of why the eKB path is so much smaller - the registry-backed feature staging, the CBS servicing pipeline, the case study behind that 174 KB-vs-6.5 GB gap - see the companion post on enablement packages and the shared servicing branch. This post assumes that background and focuses on piloting the first path safely before GA.

Gotcha: "Shares a servicing branch" does not mean "safe to skip testing." Feature flags that were off for a reason - taskbar behavior changes, File Explorer changes, Settings Backup defaults - can still break a locked-down Settings Catalog profile, a Defender ASR rule tuned against the old UI surface, or a kiosk/shell replacement that assumes the previous taskbar. The eKB being small tells you the blast radius is narrow. It tells you nothing about whether it is narrow in a place that matters to your environment - that is what the pilot is for.

How to verify: read your fleet's current feature-update posture before you pilot anything

Before you configure a single pilot ring, confirm what build a device is actually on right now - that alone tells you which of the four upgrade paths above applies to it. One command, readable with a tool you already have.

Windows PowerShell
# Confirm the current build and UBR on the local machine
Get-ComputerInfo | Select-Object WindowsProductName, OsHardwareAbstractionLayer, OsVersion, OsBuildNumber, WindowsVersion
WindowsProductName WindowsVersion OsBuildNumber
------------------ -------------- -------------
Windows 11 Pro 25H2 26200
# A device already showing 26300 has already taken 26H2 - confirm that was intentional
Real PowerShell capture of Get-ComputerInfo output, username redacted
Real capture from the same test device (username redacted). Note the mismatch: WindowsProductName reports "Windows 10 Enterprise" while OsBuildNumber is 26200 (a Windows 11 25H2 build) - WindowsProductName is a known-unreliable field on some builds and should never be trusted on its own. OsBuildNumber is the value that actually tells you the truth.

If a device already shows build 26300 and you did not put it there on purpose, stop and treat that as a finding, not a formality - it means the Release Preview seeker experience got there before your policy did.

The fix: build the Release Preview pilot, ring by ring

This is the plan itself: build the pilot ring, understand your rollback window, then run the production readiness checklist before you widen anything.

Step 1 - Create the enterprise pilot ring

Two different settings are in play here, and conflating them is the most common mistake in a 26H2 pilot. Getting a device onto the Release Preview build itself is controlled by the branch-readiness setting (BranchReadinessLevel). Protecting your broad fleet from drifting onto 26H2 by accident is a separate setting (TargetReleaseVersion). Both are also configurable via Group Policy for on-prem-managed devices, under the same Windows Update for Business templates - see the CSP/GPO reference in References if that is your management model. Once 26H2 itself reaches general availability, there is a third, newer mechanism - Intune's dedicated Feature update policy - which is cloud-orchestrated and has no Group Policy equivalent at all.

Via Intune (Settings Catalog / Update rings):

  1. Sign in to the Intune admin center.
  2. Go to Devices › Windows › Update rings and select Create profile.
  3. Name it clearly, e.g. "26H2 Release Preview Pilot" - do not reuse an existing broad ring for this.
  4. Under Update settings, set Feature update deferral period (days) to 0 for this pilot ring only (you want it to take what the branch setting below offers, not defer it further).
  5. Set Enable pre-release builds to Enable, then choose Windows Insider - Release Preview from the Select pre-release channel dropdown.
  6. Under Assignments, assign this ring to a small, deliberately chosen device group - ideally 5-20 devices covering your most common hardware and application profiles, not a random sample.
  7. Leave your existing broad rings on their current deferral and target version unchanged. They are your control group.
Devices› Windows› Update rings› Create profile
Real capture of the Intune Update ring settings page with Enable pre-release builds highlighted
Real capture from a live Intune tenant - Update ring settings, with Enable pre-release builds and Select pre-release channel highlighted.
Real capture of the Select pre-release channel dropdown showing Windows Insider - Release Preview, Beta Channel, and Dev Channel
Close-up of the dropdown's three options.
Gotcha: You will not find a "Target Feature Update version" field inside an Update ring policy - that setting lives in a separate, newer policy type (Feature updates, under Devices › Windows › Windows updates), and its dropdown only lists Windows versions that have already reached general availability. Since 26H2 is still in Release Preview, it will not appear there yet. Enable pre-release builds on the update ring is the only Intune-side lever that gets a device onto 26H2 before GA - see "When 26H2 reaches general availability" below for the formal policy you switch to afterward.
Tip: Verify the branch-readiness setting actually landed on the pilot device - reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v BranchReadinessLevel should return 8 - not just "policy applied" in the console. A policy that reports success in Intune can still fail to write the registry value if a conflicting local GPO or a prior MDM policy is still present on that device.

When 26H2 reaches general availability, replace the pre-release branch pin with the dedicated policy built for this: Devices › Windows › Windows updates › Feature updates › Create profile. Pick 26H2 from the Feature update to deploy dropdown, assign it to the same pilot group, and wait for the devices to report OfferReady in the Feature Updates (Organizational) report before you turn the pre-release branch setting off. This policy is cloud-orchestrated through the Windows Update for Business deployment service - it has no Group Policy equivalent, and unlike BranchReadinessLevel it writes nothing you can read back from the local registry; the report is the only place to confirm it landed.

Step 2 - Update and rollback considerations

Every eKB-based feature update carries the same rollback mechanics as a full feature update: a default 10-day window during which the device can be reverted via Settings › System › Recovery › Go back, backed by the same rollback files Windows keeps after any feature update. Know this window before you need it, not after.

Command Prompt (Administrator)
:: Check how long the current rollback window is set to
C:\> DISM /Online /Get-OSUninstallWindow
Deployment Image Servicing and Management tool
Version 10.0.26300.9278
Fully Uninstall period, in days: 10
Previous SxS Uninstall period, in days: 10
:: Extend it to 30 days for pilot devices, while the rollback files still exist
C:\> DISM /Online /Set-OSUninstallWindow /Value:30
  1. On every pilot device, extend the rollback window to 30 days with DISM /Online /Set-OSUninstallWindow /Value:30 immediately after the upgrade completes, before Windows.old and the rollback files have any chance of being cleaned up by disk-space pressure or a well-meaning cleanup script.
  2. Document the exact date each pilot device took the eKB, so you know precisely when the rollback window closes for that device.
  3. Treat "Go back" as the pilot's actual exit-criteria backstop: if a pilot device shows a real regression you cannot fix quickly, roll it back and capture logs before you troubleshoot further, rather than leaving it broken while you investigate.
Watch out: Extending the window only works inside the original 10-day period, and only while the rollback files are still on disk. DISM /Online /Get-OSUninstallWindow failing with error 1168 ("Element not found") means the window has already closed or the rollback data was already removed - at that point "Go back" is no longer an option and any recovery requires a fresh reinstall or a proper backup restore.

Step 3 - Production readiness checklist

Do not widen the ring past the pilot group until every row below is genuinely green, not "green enough."

AreaCheckPass criteria
Update mechanicsPilot devices took the eKB via the Release Preview branch, not the seeker experience100% of pilot devices show BranchReadinessLevel=8 and Event 19 for KB5120998; broad/control rings still show TargetReleaseVersionInfo pinned to your current GA version
RollbackRollback window understood and, for pilot devices, extendedEach pilot device's exact upgrade date logged; window extended to ≥30 days

Proof it worked: what a clean pilot looks like before you widen the ring

Illustrative example of a pilot device that has cleared every gate above - reconstructed here rather than pulled from a live tenant, since a real capture would carry this organization's own device names and group tags:

Device: PILOT-26H2-04 (illustrative)
OS version: 26H2 (26300.9278) — enrolled via the "26H2 Release Preview Pilot" update ring's pre-release branch setting
BranchReadinessLevel: 8 (Windows Insider Program - Release Preview)
OSUninstallWindow: 30 days (extended 2026-08-28)
Last WindowsUpdateClient event: 19 — Installation Successful

A device in that state - correctly enrolled in the Release Preview branch and with its rollback window deliberately extended - is what "ready to widen the ring" actually looks like. Widening from there means moving the same pilot device group's ring assignment to your next-widest ring and repeating this same checklist against that larger group before you move again.

Note: General availability for 26H2 is expected later in 2026, with version 24H2 Home and Pro editions reaching end of servicing on 13 October 2026 (Enterprise and Education editions are supported through 12 October 2027 under the shared branch). If any devices in your estate are still on an edition and channel combination that ages out before you plan to complete your own 26H2 rollout, that deadline - not the GA announcement - is the one that should be driving your pilot's timeline.

References

Microsoft MVP community deep-dives

AuthorPostWhat it adds
Thomas Marcussen (MVP)Getting Ready for Windows 11, version 26H2: Upgrade Paths, Autopatch, and Tracking Pilot to ProductionPractical Autopatch deployment-ring staging (Test/First/Fast/Last) with soak periods and exit criteria for exactly this rollout
Was this post helpful?
React below — no account needed
Share this post
LinkedIn X / Twitter Reddit Bluesky

More from EndpointWeekly

Windows Update
Windows 11 23H2 Enterprise End of Support: Build Your Intune…
Windows 11 23H2 Enterprise and Education get their last security update in November 2026.…
Windows Update
One read-only PowerShell collector for Windows patching failures…
Test-Path and value checks return confidently wrong patching verdicts on real devices.…
Windows Update
Delivery Optimization says it is peering and your WAN link says…
DO falls back to the CDN silently, with no error and no Event Viewer channel to read.…