On October 31st, Microsoft released the Windows 11 23H2 update.
Copilot, built-in decompression, passwordless device options and lots more
What’s new for IT pros in Windows 11, version 23H2
- Copilot in Windows [2] (in preview), an AI-powered intelligent assistant to help you get answers and inspirations from across the web, enhance creativity and collaboration, and focus on the task at hand.
- The ability to go passwordless on day one using Windows Hello for Business or FIDO2 security keys. Enable workers to sign in to websites or apps using face, PIN, or fingerprint.
- The ability to remove the option for password at device unlock and for in-session authentication for Microsoft Entra Join (formerly Azure AD Join) devices.
- Enhanced Windows Firewall capabilities, including:
- Application Control for Business (previously known as Windows Defender Application Control) app ID tagging with Windows Firewall rules through Intune. Target Windows Firewall rules to specific applications without an absolute file path.
- The ability to configure network list manager settings to determine when a Microsoft Entra Join device is on your on-premises domain subnets, so firewall rules can properly apply. Use the network list manager settings for Windows Firewall for location awareness.
- The ability to configure more granular Windows Firewall logging for domain, private, and public firewall profiles, as well as the ability to specify Windows Firewall inbound and outbound rules for Internet Control Message Protocol (ICMP) types and codes.
- Greater control over the taskbar search experience across your organization and the ability to customize Windows 11 taskbar buttons using new policies.
- Snipping Tool enhancements, such as:
- Audio and mic support so workers can easily record a tutorial or demonstration for colleagues and customers.
- Text extraction and redaction so you can easily copy text from an online article, conference call, or other source. Incorporate it into documents or presentations while also protecting privacy and removing confidential or sensitive information.
There are also a few additional enhancements in this scoped release, such as:
- The ability to ungroup icons and show labels on the taskbar for easy access to open applications and files.
- A more seamless File Explorer with native support for RAR and other file compression formats.
- Recommended websites in the Start menu based on each person’s browsing history. (This feature can be managed using a policy.)
- A new volume mixer to control the volume and audio output more easily for each application.
- The ability to set up a multi-app kiosk on Windows 11 devices with a customized Start menu showing only allowed apps for each account type.
- Federated sign-in for Education editions of Windows 11.
- Dev Drive, a new form of storage volume designed to improve performance for key developer workloads. Gain more control over storage volume settings and security, including trust designation, antivirus configuration, and
- administrative control over filters.
source: http://aka.ms/new-in-23H2
Group Policy templates can also be used to update your Active Directory central store
The update policy settings in intune are also ready for the rollout:
you can now select Windows 11, version 23H2 as target feature update
