Windows WN11-00-000040

1. Determine your Windows 11 OS version. a. Run "winver.exe". The "About Windows" dialog box will display the system's version and OS build. For example, "Microsoft Windows 11 Version 24H2 (OS Build 26100.8875)". Record the numbers observed. 2. Determine the system's latest installed security patch. a. Open "PowerShell" with elevated privileges (run as administrator). b. Enter the following: Get-HotFix -Description "Security Update" c. Record the "InstalledOn" date and the KB numbers listed under the "HotFixID" column in the resulting display. 3. Determine Microsoft's Support timeframe for the system's Windows 11 OS version. a. Access Microsoft's Lifecycle & Build History website at https://learn.microsoft.com/en-us/windows/release-health/windows11-release-information. b. Review the table listing the "Windows 11 current versions by servicing option" to find the end-of-support date corresponding to the system's OS version. This date marks the official deadline after which Microsoft stops providing software support (or security updates) for that operating system version. The Windows 11 current versions are categorized by servicing option. For example, (as of Aug 2026) under the General Availability Channel for Enterprise version 25H, the last date for (support) updates is 2028-10-10, and the latest build is 26200.9168. Similar data is provided for the Enterprise LTSC releases. c. Review (on the same page) a table listing "Windows 11 release history" data for OS hotpatch updates. Compare the system's OS build and KB # (from step 1 and 2) with those listed to determine how many (if any) newer patches are available for the system's OS version. It is strongly recommended that the latest security patch be installed, unless there is a valid operational reason to delay installing it. If the end-of-support date for the system's OS version (from step 3b) is a past date, this is a finding.

Determine if the end-of-support date for the system's OS build (from Microsoft's Windows 11 release history website) is a past date. If the end-of-support date for the system's OS build is in the past, perform an update to an OS build whose end-of-support date is a future date.