{"id":6867,"date":"2021-10-29T07:54:31","date_gmt":"2021-10-29T07:54:31","guid":{"rendered":"https:\/\/www.insentragroup.com\/us\/?p=6867"},"modified":"2022-03-30T08:25:59","modified_gmt":"2022-03-30T08:25:59","slug":"windows-11-is-here-should-you-upgrade-now","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/us\/insights\/geek-speak\/modern-workplace\/windows-11-is-here-should-you-upgrade-now\/","title":{"rendered":"Windows 11 is here – should you upgrade now?"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Windows 11 introduces some significant changes to hardware requirements and improvements to security<\/a>. Your organisation will benefit from these changes by improving the security posture of your Windows endpoints, I suspect most organisations will have some work to do before upgrading all devices to Windows 11. <\/p>\n\n\n\n

When Microsoft announced Windows 11<\/a>, they also announced the retirement of Windows 10 for October 14th, 2025. A migration to Windows 11 for everyone is inevitable; however, should you upgrade your organisation\u2019s devices now or continue with Windows 10 until 2025? <\/p>\n\n\n\n

Although Windows 11 is available now, Windows 10 21H2 is also ready for release<\/a>. Windows 10 21H2 continues the cumulative update approach Microsoft has taken with Windows 10 2004, 20H2 and 21H1. <\/p>\n\n\n\n

Windows 10 21H2 introduces just a few new features – the most interesting of which, will be the simplification of Windows Hello for Business with a cloud trust model. This will do away with the need to integrate Active Directory Certificate Services, making Windows Hello for Business deployment far simpler. See this article for more details: Introducing the next feature update to Windows 10: 21H2<\/a>. <\/p>\n\n\n\n

Are your devices ready for Windows 11? <\/span><\/h3>\n\n\n\n

In my experience, many organisations are still having challenges in keeping their Windows endpoints current and it\u2019s common to see devices in the organisation running Windows 10 versions which are out of support. It\u2019s also not uncommon to see Windows 8 and Windows 7 devices still out in the wild. <\/p>\n\n\n\n

What is also becoming clear is the number of corporate devices which aren\u2019t ready for Windows 11. Although a small sample size, I have seen devices in client environments which won\u2019t meet Windows 11\u2019s hardware requirements. Issues include Secure Boot not being enabled and devices which don\u2019t meet TPM requirements (TPM not enabled or not TPM 2.0 capable). Resolving these issues would represent a significant amount of work.  <\/p>\n\n\n\n

Additionally, Windows 11\u2019s minimum CPU requirements will ensure a certain percentage of devices in an organisation won\u2019t be running Windows 11 until they are retired and replaced. <\/p>\n\n\n\n

Update to Windows 10 21H2 now <\/span><\/h3>\n\n\n\n

Upgrading to Windows 11 for many organisations is going to be a challenge in the short term, so instead, your time would be better spent upgrading devices to Windows 10 21H2. <\/p>\n\n\n\n

Windows 10 21H2 is a cumulative update for any Windows 10 device on version 2004 or later, which means you will be able to update without delay and have confidence your devices and applications will be compatible. Updating to Windows 10 21H2 as soon as possible, will ensure your organisation benefits from extended support, 18 months for Windows 10 Pro and 30 months for Windows 10 Enterprise and Education<\/a>. As Microsoft has not yet made an announcement for Windows 10 releases beyond 21H2, it\u2019s reasonable to assume this version will be supported right up to 2025. <\/p>\n\n\n\n

A new Windows 10 21H2 Long-Term Servicing Channel (LTSC) will also be available, allowing all compatible devices to be upgraded to 21H2 Semi-annual Channel or LTSC and have those devices supported until 2025. <\/p>\n\n\n\n

Read more about the importance of patching in this blog<\/a> by my colleague Peter Cooney, Global Head of Solutions here at Insentra.  <\/p>\n\n\n\n

Report on your device compatibility with Windows 11 <\/span><\/h3>\n\n\n\n

Microsoft has a few tools you can use to report on Windows 11 compatibility. The preferred approach for reporting on Windows 11 readiness is to use the Work from anywhere report<\/a> in Endpoint Analytics in the Microsoft Endpoint Manager admin centre.  <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

For environments using Microsoft Intune to manage devices, you will have access to this report now. If you\u2019re using Microsoft Endpoint Configuration Manager to manage your Windows devices, make sure you\u2019ve deployed tenant attach<\/a> and co-management so you can take advantage of this report as well.<\/p>\n\n\n\n

There are plenty of good reasons to adopt tenant attach and co-management. For most clients, it will provide more insights into your Windows endpoint environment and the opportunity to simplify the management of Windows devices.<\/p>\n\n\n\n

For those environments which haven\u2019t yet moved to tenant attach and co-management or can\u2019t (for whatever reason), Microsoft has a hardware readiness script available which can be run via Configuration Manager. For more information see this article: Understanding readiness for Windows 11 with Microsoft Endpoint Manager<\/a>.<\/p>\n\n\n\n

Update devices for Windows 11 compatibility<\/span><\/h3>\n\n\n\n

Once you\u2019ve determined Windows 11 readiness in your environment, you will have some work to do updating devices which are not compatible. In real client environments, we are seeing the need to update firmware, configure Trusted Platform Modules<\/a>, enable Secure Boot or upgrade RAM capacity.<\/p>\n\n\n\n

With those devices incapable of running Windows 11 at all (typically due to CPU), then updating them to Windows 10 21H2 will ensure the device is running a supported configuration until its end of life. From there you can plan for their retirement and replacement.<\/p>\n\n\n\n

Ensure your device management tools are Windows 11 ready<\/span><\/h3>\n\n\n\n

Adding support for Windows 11 in your deployment tools should be an easy task – upgrade to Configuration Manager 2017 and\/ or wait for Microsoft to include full support for Windows 11 in Intune.<\/p>\n\n\n\n

Just like Windows, you should be keeping your Configuration Manager environments current, so upgrading to Configuration Manager 2107 should be part of the standard support lifecycle.<\/p>\n\n\n\n

Microsoft has already been updating Microsoft Intune to support Windows 11 with changes in the Microsoft Endpoint Manager admin center<\/a>.<\/p>\n\n\n\n

Capable devices won\u2019t automatically update to Windows 11<\/a>. As a Windows administrator, you will have controls in Group Policy, Windows Server Update Services, Configuration Manager and Microsoft Intune to upgrade devices to Windows 11 when you are ready to do so.<\/p>\n\n\n\n

Customers using Windows Autopilot should be aware of which version of Windows comes with new devices. Remember Windows 10 is supported until 2025, however  well before then device manufacturers will start shipping PCs with Windows 11.<\/p>\n\n\n\n

Validate and pilot Windows 11 now<\/span><\/h3>\n\n\n\n

Whether you know it or not, I\u2019ll bet at least one person in your organisation is already testing Windows 11. I have seen this over the past few months in at least four client environments.<\/p>\n\n\n\n

It is important to start validating Windows 11 now to determine whether you need to make changes to your deployment methodology. There are no major changes you need to make in the way you manage Windows 10 today to start managing Windows 11; however, there are some key changes and features introduced with Windows 11.<\/p>\n\n\n\n

Not least of these changes is the new Start menu, Taskbar and the Settings application. These will be obvious changes to users, thus it\u2019s worth ensuring these new features are well understood before Windows 11 is deployed to your managed endpoints. Additionally, there are changes to the Microsoft Store coming with Windows 11<\/a> which could have a big impact on the way some organisations manage applications on their devices.<\/p>\n\n\n\n

Start with a small-scale pilot within IT, even if it\u2019s manually updating devices to Windows 11, and validate if the organisation is ready for those important changes coming with this new version of Windows.<\/p>\n\n\n\n

Communicate with your users<\/span><\/h3>\n\n\n\n

I highly recommend communicating with user end-users that Windows 11 is on the way, even if it\u2019s just to say, \u201cWindows 11 is coming\u201d.<\/p>\n\n\n\n

Changes to the Windows 10 interface since the initial release in 2015 have realistically been minor with iterative updates with each release. Windows 11 introduces major interface changes and while the way you interact with Windows 11 doesn\u2019t fundamentally change, users should have some understanding of the changes they will see when their PC is upgraded.<\/p>\n\n\n\n

Deploy in 2022<\/span><\/h3>\n\n\n\n

Can you believe it\u2019s already October 2021? You\u2019ve probably got plenty to do before the end of the year and for all of us, 2020 and 2021 have been difficult enough. Plan and prepare now, so you\u2019re ready to start deploying Windows 11 in 2022.<\/p>\n\n\n\n

We\u2019re here to help, of course. We have developed a robust methodology for modern device management using Microsoft Endpoint Manager which takes you from design right through to production release, providing a framework for a successful deployment and adoption of new technologies introduced in Windows 10 and Windows 11. <\/p>\n\n\n\n

Curious about Microsoft Edge? I captured  17 reasons why organisations should standardise on Edge in my previous blog<\/a>.<\/p>\n\n\n\n\n.attachment-large {\n display: none !important;\n}\n\n","protected":false},"excerpt":{"rendered":"

Windows 11 introduces some significant changes to hardware requirements and improvements to security. <\/p>\n","protected":false},"author":65,"featured_media":7147,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[19],"tags":[100,99,95,47,59,60,102,103,73,86,96,98,97,101],"class_list":["post-6867","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-modern-workplace","tag-end-of-life","tag-end-of-support","tag-endpoint-protection","tag-intune","tag-microsoft","tag-microsoft-365","tag-modern-workplace","tag-office-365","tag-patch-management","tag-security","tag-windows-10","tag-windows-11","tag-windows-365","tag-windows-autopilot","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts\/6867","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/users\/65"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/comments?post=6867"}],"version-history":[{"count":5,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts\/6867\/revisions"}],"predecessor-version":[{"id":8913,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts\/6867\/revisions\/8913"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/media\/7147"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/media?parent=6867"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/categories?post=6867"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/tags?post=6867"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}