What is new in Windows 11 for June 2026

Earlier this month, we announced that Windows 11, version 26H2—the next annual feature update for Windows 11—is now available for early testing and validation via the Windows Insider Program. As this release will share the same servicing branch as versions 25H2 and 24H2, devices can be updated using an enablement package, quickly and with minimal disruption to users. Microsoft also announced major Windows 365 updates at Build 2026, introducing ready-to-code Cloud PCs, expanded developer-focused capabilities, and new support for secure enterprise AI agents.


Now let's dive into more developments in the world of Windows for IT admins from the month of June.

New in Windows update and device management​

• [RECOVERY] – Now generally available, point‑in‑time restore for Windows 11 can help users recover in minutes instead of hours by safely rolling a device back to a previous state. This built-in recovery capability is available for Windows Enterprise, Pro, and Home editions of Windows 11.
  
  
  

  Enable or Disable Point-in-time Restore in Windows 11

  This tutorial will show you how to turn on or off the point-in-time restore feature in Windows 11. Starting with Windows 11 build 26100.8737 (24H2), build 26200.8737 (25H2), and build 28000.2340 (26H1), Microsoft introduced point-in-time restore for Windows. This flexible recovery feature...

  www.elevenforum.com
  

  Perform Point-in-time Restore of Windows 11

  This tutorial will show you how to use the point-in-time restore feature to restore your Windows 11 PC to the exact state it was at an earlier point in time using restore points. Starting with Windows 11 build 26100.8737 (24H2), build 26200.8737 (25H2), and build 28000.2340 (26H1), Microsoft...

  www.elevenforum.com
  

  Change Restore Point Frequency for Point-in-time Restore in Windows 11

  This tutorial will show you how to change how frequently restore points are created for point-in-time restore in Windows 11. Starting with Windows 11 build 26100.8737 (24H2), build 26200.8737 (25H2), and build 28000.2340 (26H1), Microsoft introduced point-in-time restore for Windows. This...

  www.elevenforum.com
  

  Change Restore Point Retention for Point-in-time Restore in Windows 11

  This tutorial will show you how to change how long restore points can exist on the system before they are automatically deleted for point-in-time restore in Windows 11. Starting with Windows 11 build 26100.8737 (24H2), build 26200.8737 (25H2), and build 28000.2340 (26H1), Microsoft introduced...

  www.elevenforum.com
  

  Change Maximum Disk Usage Limit for Point-in-time Restore in Windows 11

  This tutorial will show you how to set a maximum disk usage limit for the total space consumed by all restore points captured by VSS on the device for point-in-time restore in Windows 11. Starting with Windows 11 build 26100.8737 (24H2), build 26200.8737 (25H2), and build 28000.2340 (26H1)...

  www.elevenforum.com
  

  See List of Available Point-in-time Restore Points in Windows 11

  This tutorial will show you how to see a list of all available point-in-time restore points in Windows 11. Starting with Windows 11 build 26100.8737 (24H2), build 26200.8737 (25H2), and build 28000.2340 (26H1), Microsoft introduced point-in-time restore for Windows. This flexible recovery...

  www.elevenforum.com
  

  Delete Restore Points for System Restore and Point-in-time Restore in Windows 11

  This tutorial will show you how to manually delete all, oldest, or specific restore points created by System Restore and/or Point-in-time restore in Windows 11. While System Restore and Point-in-time both use the Volume Shadow Copy Service (VSS) to create restore points, they are separate...

  www.elevenforum.com
• [W365] – An optimized Teams experience for Remote App scenarios is now available, offering improved audio and video performance, reliability, and security.
• [PRINTING] – What was formerly the Modern Print Platform is now Windows Ready Print. It's now Windows preferred means of communicating to printers, including the Internet Printing Protocol (IPP), eSCL scanning, and Universal Print. Starting in July 2026, new printer installations will default to Windows Ready Print where supported, enabling a simpler and more reliable setup experience.
  
  
  

  Enable or Disable Windows Ready Print in Windows 11

  This tutorial will show you how to enable or disable install printers using Windows Ready Print by default in Windows 11. In May 2026, Microsoft introduced a change where new printer installations use Internet Printing Protocol (IPP) by default when supported to simplify setup and improve...

  www.elevenforum.com
• [APPS] – Auto-updates in Microsoft Intune Enterprise Application Management are now available. Keep managed applications on the latest incremental release, such as 4.1 to 4.2, without manual packaging or admin intervention.

New in Windows security​

• [SECURE BOOT] [TIPS] – If your organization hasn't yet finished updating Secure Boot certificates for client devices, servers, or virtual machines, find out which best practices can help. If you run into devices that are blocked from receiving updated Secure Boot certificates, explore actions you can consider.
• [SECURE BOOT] [LINUX] – New guidance is now available to help you manage Secure Boot certificate updates for Linux on Azure virtual machines. This includes Trusted Launch and Confidential VMs with Secure Boot enabled.
• [SECURE BOOT] [EVENTS] – In response to your feedback, two specialized Q&A events for Secure Boot will take place in July. Join Secure Boot Office Hours for virtualized environments (July 8). During OEM Secure Boot Office Hours (July 15), get answers from the OEM ecosystem, Broadcom, and Windows cloud experience experts. (Note: There is no on-camera or meeting component to these events. All Q&A will take place in the comments on the Tech Community.)
• [IDENTITY] – IAKerb and LocalKDC are new capabilities that expand Kerberos authentication across enterprise and local account scenarios. That's how Microsoft is advancing efforts to reduce NTLM dependency and strengthen security. Available today in the Windows Insider Program, a public preview is coming for both client and server.
• [W365] [DATA PROTECTION] – Context-based redirections for Windows 365 can now be explored in public preview. Apply more granular controls to device and resource redirection based on contextual signals. Available signals are device management state, compliance posture, user or group membership, and network conditions.
• [HARDENING] – The final deployment phase for Kerberos RC4 hardening begins with the July 2026 Windows security update. This phase completes the transition from legacy encryption types such as RC4. It removes Audit mode and leaves Enforcement mode as the only supported behavior for Kerberos RC4 usage on Windows domain controllers.

To explore what's new in security across the Microsoft platform, see What's new in Microsoft Security: June 2026.

New in AI​

• [AGENTS] [SECURITY] – At Build 2026, Windows introduced new security foundations for AI agents. They're designed to provide governance, containment, and enterprise-grade controls for autonomous agent workloads.
• [AGENTS] [W365] – Windows 365 for Agents is generally available within Agent 365. With this update, Cloud PCs that enable AI agents can execute multi-step workflows across software. Use it to open apps, navigate interfaces, enter inputs, and process data.

New in Windows Server​

For the latest features and improvements for Windows Server, see the Windows Server 2025 release notes and Windows Server, version 23H2 release notes.

• [NETWORKING] – DoH support for Windows DNS Server is generally available on Windows Server 2025. You can now deploy encrypted and authenticated client-to-resolver DNS traffic directly within your existing on-premises DNS infrastructure.
• [HOTPATCH] – Hotpatch update support for Windows Server 2022 Datacenter: Azure Edition has been extended through October 2027.

New in productivity and collaboration​

Install the June 2026 security update for Windows 11, versions 25H2 and 24H2 to get these and other capabilities, which will be rolling out gradually:

• AUDIO – Shared Audio can keep people productive on the move. Two people can now to listen to the same audio from a single Windows 11 PC at the same time.
• [SECURITY] – When Windows Hello face or fingerprint is set up and available, it's now the default sign-in method every time you sign in. Even if you used a different method previously.
• [FILES] – Windows Search will now find and prioritize files with as few as two characters.
• [BATTERY] – This update improves resiliency against apps that could keep the sensor hub powered on and drain power. Enjoy a better battery life.

New features and improvements are coming in the July 2026 security update. You can preview them by installing the June 2026 optional non-security update for Windows 11, versions 25H2 and 24H2. This update includes the gradual rollout of:

• [WIDGETS] – A quieter, more focused Widgets experience helps reduce interruptions and improves default settings and notification controls. For example, Widgets no longer open on hover, and notifications and taskbar badges are minimized by default.
• [ACCESSIBILITY] – You can now apply a full-screen color overlay to help reduce eye strain and improve readability. You can also enter a zoom percentage directly and change it in increments in the Magnifier window for more precise, flexible control. And, you can now use voice access and voice typing in French, German, and Spanish.
  
  
  

  Enable or Disable Screen Tint in Windows 11

  This tutorial will show you how to turn on or off using Screen Tint for your account in Windows 11. Starting with Windows 11 build 26100.8737 (24H2) and build 26200.8737 (25H2), Microsoft is introducing screen tint, a new accessibility setting that applies a color overlay across your entire...

  www.elevenforum.com

To learn about planned productivity, security, and reliability updates for Windows 11, visit the Windows Roadmap.

Lifecycle reminders​

• [SERVER] – DirectAccess has been deprecated and will be removed in a future version of Windows Server. It has been replaced by a more modern, flexible solution: Always On VPN. For migration guidance, see Remote Access Always On VPN migration.
• [WINDOWS 10] [ESU] – The Windows 10 Extended Security Updates (ESU) program for personal use devices is being provided for an additional year. Coverage is now available through Oct. 12, 2027.

Check out our lifecycle documentation for the latest updates on Deprecated features in the Windows client and Features removed or no longer developed starting with Windows Server 2025.

Additional resources​

Looking for the latest news and previews for Windows, Copilot, Copilot+ PCs, the Windows and Windows Server Insider Programs, and more? Check out these resources:

• Windows Roadmapfor new Windows features – filter by platform, version, status, and channel or search by feature name
• Microsoft 365 Copilot release notesfor latest features and improvements
• Windows Insider Blogfor what's available in the Beta and Experimental channels
• Windows Server Insiderfor feature preview opportunities
• Understanding update history for Windows Insider preview features, fixes, and changesto learn about the types of updates for Windows Insiders

Join the conversation​

We are always looking to improve this monthly summary. Drop us a note in the Comments and let us know what we can do to make this more useful for you!