This commit is contained in:
Meghan Stewart
2022-09-19 12:56:30 -07:00
parent 9db5638be6
commit 33989137a2

View File

@ -11,10 +11,10 @@ ms.collection: highpri
ms.custom: intro-overview
---
# What's new in Windows 11, version 21H2
# What's new in Windows 11, version 22H2
**Applies to**: Windows 11, version 22H2
<!--6681501-->
Windows 11 22H2 is a feature update for Windows 11. It includes all features and fixes in previous cumulative updates to Windows 11, version 21H2, the original Windows 11 release version. This article lists the new and updated features IT Pros should know.
Windows 11, version 22H2 follows the [Windows 11 servicing timeline](/lifecycle/faq/windows#windows-11):
@ -31,18 +31,18 @@ To learn more about the status of the update rollout, known issues, and new info
## Personal Data Encryption
<!--5963468 -->
Personal data encryption (PDE) is a security feature introduced in Windows 11, version 22H2 that provides encryption of individual user files in the known user folders of **Documents**, **Pictures**, and **Desktop**. PDE occurs in addition to other encryption methods such as BitLocker. PDE utilizes Windows Hello for Business to link data encryption keys with user credentials. Unlike BitLocker, which unlocks data encryption keys at boot, PDE doesn't unlock data encryption keys until a user signs in using Windows Hello for Business.
Personal data encryption (PDE) is a security feature introduced in Windows 11, version 22H2 that provides encryption of individual files. PDE occurs in addition to other encryption methods such as BitLocker.
For more information, see [Personal Data Encryption](/windows/security/information-protection/personal-data-encryption).
PDE utilizes Windows Hello for Business to link data encryption keys with user credentials. This feature can minimize the number of credentials the user has to remember to gain access to files. For example, when using BitLocker with PIN, a user would need to authenticate twice - once with the BitLocker PIN and a second time with Windows credentials. This requirement requires users to remember two different credentials. With PDE, users only need to enter one set of credentials via Windows Hello for Business.
## OEM
<!--6286145, In9479568-->
For more information, see [Personal Data Encryption](/windows/security/information-protection/personal-data-encryption/overview-pde).
## Modern Windows Experiences
## Start menu layout
<!--6286095-->
Windows 11, version 22H2 now supports additional CSPs for customizing the start menu layout. These CSPs allow you to hide the app list and disable context menus.
## Windows update
<!--6286244,6286260 -->
For more information, see [Supported configuration service provider (CSP) policies for Windows 11 Start menu](/windows/configuration/supported-csp-start-menu-layout-windows#existing-windows-csp-policies-that-windows-11-supports).
## WebAuthn APIs support ECC
@ -53,13 +53,10 @@ For more information, see [WebAuthn APIs for passwordless authentication on Wind
## Enhanced Phishing Protection
<!--6286059, 6063796-->
**Enhanced Phishing Protection** in **Microsoft Defender SmartScreen** helps protect Microsoft school or work passwords against phishing and unsafe usage on websites and in applications. Enhanced Phishing Protection works alongside Windows security protections to help protect Windows 11 work or school sign-in passwords.
[For more information, see [Enhanced Phishing Protection in Microsoft Defender SmartScreen](/windows/security/threat-protection/microsoft-defender-smartscreen/phishing-protection-microsoft-defender-smartscreen).
## Education
<!--6286248, 6286399-->
Starting in Windows 11 SE, version 22H2, **Stickers** is a new feature that allows students to decorate their desktop with digital stickers. Students can choose from over 500 cheerful, education-friendly digital stickers. Stickers can be arranged, resized, and customized on top of the desktop background. Each student's stickers remain, even when the background change.
@ -70,6 +67,16 @@ Starting in Windows 11, version 22H2, you can deploy education themes to your de
For more information, see [Configure education themes for Windows 11](/education/windows/edu-themes).
## Windows Update notifications
<!--6286260 -->
The following items were added for Windows Update notifications:
- You can now block user notifications for Windows Updates during active hours. This setting is especially useful for educational organizations that want to prevent Windows Update notifications from occurring during class time. For more information, see [Control restart notifications](/windows/deployment/update/waas-restart#control-restart-notifications).
- The organization name now appears in the Windows Update notifications when Windows clients are associated with an Azure AD tenant.
For more information, see [Display organization name in Windows Update notifications](/windows/deployment/update/waas-wu-settings#bkmk_display-name).
## Windows Hello
<!-- 6286360-->
@ -86,7 +93,7 @@ For more information, see [Manage Windows Defender Credential Guard](/windows/se
## Manageability
<!--6286218-->
## Smart App Control
## Smart App Control
<!-- 6286281-->
**Smart App Control** adds significant protection from malware, including new and emerging threats, by blocking apps that are malicious or untrusted. **Smart App Control** also helps to block potentially unwanted apps, which are apps that may cause your device to run slowly, display unexpected ads, offer extra software you didn't want, or do other things you don't expect.
@ -102,6 +109,10 @@ For more information, see [recommended block rules](/windows/security/threat-pro
## Pluton
<!--6286417 -->
Microsoft Pluton security processor is a chip-to-cloud security technology built with Zero Trust principles at the core. Microsoft Pluton provides hardware-based root of trust, secure identity, secure attestation, and cryptographic services. Pluton technology is a combination of a secure subsystem which is part of the System on Chip (SoC) and Microsoft authored software that runs on this integrated secure subsystem. Microsoft Puton can be enabled on devices with Pluton capable processors running Windows 11, version 22H2.
For more information, see [Microsoft Pluton security processor](/windows/security/information-protection/pluton/microsoft-pluton-security-processor).
## Security hardening and threat protection
<!--6289245-->
Windows 11, version 22H2 supports additional protection for the Local Security Authority (LSA) process to prevent code injection that could compromise credentials.