Windows 11 26H2 Brings Security Changes; Iru Adds Support
Summary
Microsoft released Windows 11 26H2 on Sept. 29, 2026, as an enablement package for 24H2 and 25H2. It includes administrator protection, built-in Sysmon (off by default), and tighter driver trust; Iru supports the update.
Key points
- Windows 11 26H2 became available Sept. 29, 2026, as a small enablement package for 24H2 and 25H2, requiring one restart.
- Administrator protection provides temporary elevated rights and separates administrator and standard profiles to limit privilege-escalation attacks.
- Built-in Sysmon captures system events for threat detection; it is off by default, and administrators choose what it logs.
- Cross-signed drivers are no longer trusted by default; WHCP-certified drivers and approved legacy drivers remain supported.
- Windows Hello Enhanced Sign-in Security now supports compatible external fingerprint readers.
- Iru says its Managed OS service supports 26H2. Devices running 26H1 cannot install 26H2, with Microsoft planning to bring them onto the same foundation in 2027.
Article Details
- Event Type
- Microsoft released Windows 11 version 26H2, an enablement-package update supported by Iru.
- Impact
- 26H2 makes several previously introduced security features permanent, including administrator protection, built-in Sysmon, expanded Windows Hello Enhanced Sign-in Security support, and stricter driver trust. Devices running 26H1 cannot install 26H2; Microsoft plans to bring them onto the same foundation in 2027.
Vendors
Products
Managed OSThe OS is generally available, and with Iru, you can quickly get devices moved via Managed OS.Windows 11Windows 11 version 26H2 is available from Microsoft as of September 29, 2026, and Iru now supports it.Windows Hello Enhanced Sign-in SecurityWindows Hello Enhanced Sign-in Security now works with compatible external fingerprint readers, so more PCs can use it.Windows SysmonBuilt-in Sysmon captures system events for threat detection.