Windows 11 24H2 Home and Pro need a confirmed upgrade, not just an assigned policy. Separate supported Enterprise devices, check prerequisites and restart completion, then validate the Intune trouter wildcard before retiring old exceptions.
Windows-11
26H2 is GA now: two policies decide your week
Windows 11 26H2 went GA on September 29 as an enablement package: KB5121794, one restart, and a cumulative update you have to be current on first. The catch is policy, not code. Allow Temporary Enterprise Feature Control turns on every dormant feature at the next restart rather than the one you wanted, and Microsoft’s own EPM troubleshooting page says Administrator protection breaks Endpoint Privilege Management elevation on the same device today. Read that page before you pilot either one.
Intune health attestation moves to Azure Attestation: the proxy check to run now
Intune will move Windows health attestation compliance evaluation from Device Health Attestation to Microsoft Azure Attestation at the end of Q1 2027. Windows 11 devices with BitLocker, Secure Boot or Code Integrity settings fall out of compliance if they cannot reach their tenant’s intunemaape*.attest.azure.net host, and TLS inspection on that traffic breaks attestation even when port 443 is open.
This is the way: Windows Autopilot device preparation
Microsoft has not retired classic Windows Autopilot, and nothing in the documentation behind this post carries an end-of-life date for it. What the September Intune Customer Success post did say is that device preparation is now the recommended path for user-driven Entra join and that future engineering investment goes there. That is a direction, not a deadline, and it matters because the transition costs money before any deadline appears: every new Windows 11 device provisioned the old way is another one to migrate later, Windows 10 and hybrid-joined fleets have no device preparation path at all, and pre-association only converts devices at their next natural reset. Start with the population that qualifies rather than the whole estate.
Windows 11 26H2 Is an Enablement Package — 24H2 Home/Pro End October 13
Windows 11 26H2 (Build 26300.9278) is in Release Preview as an enablement package on the 24H2/25H2 servicing branch. Do not treat it as the October 13 fix. 24H2 Home, Pro, Pro Education, and Pro for Workstations lose updates that day. Enterprise 24H2 lasts until October 12, 2027. 25H2 is already GA if you cannot wait for 26H2.
Windows Autopilot device association can retire the rename script
If Autopilot device preparation is already your main path, you still rename with a script. Windows Autopilot device association in the Aug 27 preview CU (KB5120998) adds a name template during OOBE. The tax is a DeviceLink CSV, one device at a time, on physical TPM hardware.
Windows Insider cert Aug 11: Beta minimum builds posted, taskbar positions on Beta
Short follow-up: the July 31 Insider drop names the Beta and Experimental minimum builds ahead of the Aug 11, 2026 flight-cert expiry. winver check, patch plan, and a note on Beta picking up the alternate taskbar.
Windows Insider flight cert expires Aug 11 – update your lab devices now
Windows Insider flight certs expire Aug 11, 2026. This year it hits Experimental and Beta, not just Canary. Here is the operator checklist before your lab devices stall.