Last recommendation: Always slipstream the latest cumulative update into the ISO before deployment – the RTM build (22631.2428) has a dozen resolved printing and LSA bugs.
1. Overview & Positioning | Attribute | Detail | |-----------|--------| | OS Family | Windows NT 10.0 (build 22631) | | Edition | Enterprise | | Version | 23H2 (2023 H2 release) | | Architecture | x86_64 (AMD64) | | Support lifecycle | 36 months from general availability (Oct 2023 – Oct 2026) | | Servicing model | GCB (General Availability Channel) + LTSC optional |
(22H2 → 23H2):
windows11.0-kb5027397-x64.msu No new install.wim needed – just a small enablement package that flips the build number. After downloading from VLSC (Volume Licensing Service Center) or M365 Admin Center:
Get-FileHash .\en-us_windows_11_enterprise_23h2_x64.iso -Algorithm SHA256 windows 11 enterprise version 23h2 64-bit iso
dism /Get-ImageInfo /ImageFile:F:\sources\install.wim Expect: Windows 11 Enterprise (22631.2428) | Feature | 23H2 behavior | |---------|----------------| | Copilot in Windows | Built-in, toggleable via GPO. Requires Edge WebView2. | | Dev Drive (ReFS v3.9) | Performance + security volume, mandatory antivirus offload. | | Windows Hello for Business (WHfB) | Support for passkeys (FIDO2 over NFC/BT). | | SMB over QUIC | Default enabled for edge file access. | | WinGet v1.6 | Integrated into image servicing stack. | | Local Security Authority (LSA) protection | On by default (audit mode). | | Smart App Control | Available only on clean installs (not upgrades). |
(example – actual varies by month's patch level): | | Windows Hello for Business (WHfB) |
E6B5B7C... (check MS docs per release)