Inbox Microsoft Store apps update in Windows 11 media

Built-in Windows apps just got a significant update through media releases of the latest versions of Windows 11 and Windows Server.

When you install Windows 11, version 24H2 or Windows Server 2025 using media refreshed in or after June 2025, the system will have the newer versions of apps out-of-the-box. You won’t need immediate updates from the Microsoft Store. The result is a more secure, compliant, and user-friendly experience from day one of deployment.

Key features and improvements​

Today, all new media for these releases come with newer versions of the inbox Microsoft Store apps preinstalled instead of the release-to-manufacturing (RTM) version. This includes updated ISO images, virtual hard disks (VHDs), and Azure Marketplace images.

Newer inbox apps included​

The refreshed media comes with improvements! Below is the list of the inbox Microsoft Store apps that traditionally would have needed updating after operating system (OS) installation.

The Windows 11, version 24H2 media now comes with 36 updated built-in apps:

• Alarms & Clock
• App Installer
• AV1 Video Extension
• AVC Encoder Extension
• Bing Search
• Calculator
• Camera
• Clipchamp
• Cross Device Experience Host
• Get Help
• HEIF Image Extension
• HEVC Video Extension
• Media Player
• Microsoft Store
• Microsoft To Do
• Notepad
• Office Hub
• Paint
• Phone Link
• Photos
• Power Automate
• Quick Assist
• Raw Image Extension
• Snipping Tool
• Solitaire Collection
• Sound Recorder
• Sticky Notes
• Store Purchase App
• VP9 Video Extension
• Weather
• Web Media Extensions
• WebP Image Extension
• Windows Security
• Windows Web Experience Pack
• Xbox Game Bar
• Xbox Speech-to-Text Overlay

The Windows Server 2025 media includes two updated apps:

• App Installer
• Windows Security

Enhanced security and compliance​

By refreshing inbox apps to newer versions, Microsoft is addressing security vulnerabilities present in older app releases.

Previously, a freshly deployed Windows image might contain out-of-date apps with known common vulnerabilities and exposures (CVEs). Newly built PCs or cloud virtual machines (VMs) could trigger security alerts for outdated app versions as soon as they were deployed and until those apps received updates.

With the new media, refreshed monthly in or after June 2025, the apps are kept up to date, reducing vulnerability windows. This will help your organization stay compliant with security requirements (e.g., meeting cybersecurity baseline mandates).

In short, the OS images now deliver a more secure baseline configuration out-of-the-box.

Seamless out-of-box experience​

You’ll notice far fewer app updates immediately after installation on devices imaged with the latest media. These devices won’t spend their first hours fetching dozens of app updates from the Microsoft Store and updating. Instead, you’ll:

• Save bandwidth and time.
• Start using built-in apps immediately with the improved features and fixes in place.

The onboarding experience is smoother and less disruptive since the system is essentially “day-zero updated.”

There’s nothing you or users at your organization need to do post-installation to update these inbox apps! Everything is handled as part of the standard imaging process.

How to get the updated media​

1. Download the June 2025 or later updated media. Get Windows 11, version 24H2 and Windows Server 2025 ISO images by signing in to the Microsoft 365 admin center. Similarly, the images available on Microsoft websites (for example via the Media Creation Tool) and the Azure Marketplace gallery images for these OS versions have also been updated. For a general overview of Windows deployment and imaging processes, you can refer to the Windows deployment documentation. Please note Volume Licensing Service Center (VLSC) has been retired.
2. Deploy devices using refreshed images. When installing new PCs or provisioning VMs, use the June 2025 or later updated media. Because the media itself contains the new app versions, you don’t need any immediate Microsoft Store updates for inbox apps post-installation. This makes your deployment process faster and reduces the post-deployment workload. You can point your standard enterprise deployment tools (Microsoft Configuration Manager, etc.) to the new images just as with any regular update.

Do you have any devices on Windows 11, version 24H2 or Windows Server 2025 that were set up using older (pre-June 2025) media? You can easily achieve the same up-to-date app state! Simply ensure that all Microsoft Store apps on those devices are updated to the latest versions. Do this via the Microsoft Store (if available in your environment) or via your enterprise app management tools, especially if Microsoft Store access is restricted. The interoperability of Microsoft Intune with the Microsoft Store can automatically keep apps up to date when new versions become available. This is ideal for devices where users don’t have direct Microsoft Store access.

Get more secure Windows apps from day one​

Start benefiting from all the app fixes and features with minimal effort today. Just download the monthly refreshed media or update apps on existing installations of Windows 11, version 24H2 or Windows Server 2025 with this quick guide.

Want more details on managing app updates in enterprise environments? See the Microsoft guide on adding and updating Microsoft Store apps via Intune.