What’s new in Windows 10, version 20H2 for IT Pros

Applies to

• WindowsВ 10, version 20H2

This article lists new and updated features and content that is of interest to IT Pros for Windows 10, version 20H2, also known as the Windows 10 October 2020 Update. This update also contains all features and fixes included in previous cumulative updates to Windows 10, version 2004.

With this release and future releases, the Windows 10 release nomenclature is changing from a year and month pattern (YYMM) to a year and half-year pattern (YYH1, YYH2).

As with previous fall releases, Windows 10, version 20H2 is a scoped set of features for select performance improvements, enterprise features, and quality enhancements. As an H2-targeted release, 20H2 is serviced for 30 months from the release date for devices running Windows 10 Enterprise or Windows 10 Education editions.

To download and install Windows 10, version 20H2, use Windows Update (Settings > Update & Security > Windows Update). For more information, including a video, see How to get the Windows 10 October 2020 Update.

Microsoft Edge

This release automatically includes the new Chromium-based Microsoft Edge browser instead of the legacy version of Edge. For more information, see the Microsoft Edge documentation.

Servicing

Windows Update

There are several changes that help improve the security of devices that scan Windows Server Update Services (WSUS) for updates. For more information, see Changes to improve security for Windows devices scanning WSUS.

Starting with Windows 10, version 20H2, LCUs and SSUs have been combined into a single cumulative monthly update, available via Microsoft Catalog or Windows Server Update Services. For more information, see Simplifying on-premises deployment of servicing stack updates.

Deployment

New guidance is available to help prepare a servicing strategy and move your devices to the latest version of Windows 10 quickly and as seamlessly as possible.

Activities are grouped into the following phases: Plan > Prepare > Deploy:

Plan your deployment by evaluating and understanding essential activities:

• Create a phased deployment plan
• Assign roles and responsibilities within your organization
• Set criteria to establish readiness for the upgrade process
• Evaluate your infrastructure and tools
• Determine readiness for your business applications
• Create an effective, schedule-based servicing strategy

Prepare your devices and environment for deployment by performing necessary actions:

Deploy and manage Windows 10 strategically in your organization:

• Use Windows Autopilot to streamline the set up, configuration, and delivery of new devices
• Use Configuration Manager or MDT to deploy new devices and update existing devices
• Use Windows Update for Business with Group Policy to customize update settings for your devices
• Deploy Windows updates with Windows Server Update Services (WSUS)
• Manage bandwidth for updates with Delivery Optimization
• Monitor Windows Updates with Update Compliance

Windows Autopilot

Enhancements to Windows Autopilot since the last release of Windows 10 include:

• Windows Autopilot for HoloLens: Set up HoloLens 2 devices with Windows Autopilot for HoloLens 2 self-deploying mode.
• Windows Autopilot with co-management: Co-management and Autopilot together can help you reduce cost and improve the end user experience.
• Enhancements to Windows Autopilot deployment reporting are in preview. From the Microsoft Endpoint Manager admin center (endpoint.microsoft.com), select Devices >Monitor and scroll down to the Enrollment section. Click Autopilot deployment (preview).

Windows Assessment and Deployment Toolkit (ADK)

There is no new ADK for Windows 10, version 20H2. The ADK for Windows 10, version 2004 will also work with Windows 10, version 20H2. For more information, see Download and install the Windows ADK.

Device management

Modern Device Management (MDM) policy is extended with new Local Users and Groups settings that match the options available for devices managed through Group Policy.

For more information about what’s new in MDM, see What’s new in mobile device enrollment and management

Security

Microsoft Defender for Endpoint

This release includes improved support for non-ASCII file paths for Microsoft Defender Advanced Threat Protection (ATP) Auto Incident Response (IR).

The DisableAntiSpyware parameter is deprecated in this release.

Microsoft Defender Application Guard for Office

Microsoft Defender Application Guard now supports Office: With Microsoft Defender Application Guard for Office, you can launch untrusted Office documents (from outside the Enterprise) in an isolated container to prevent potentially malicious content from compromising your device.

Windows Hello

With specialized hardware and software components available on devices shipping with Windows 10, version 20H2 configured out of factory, Windows Hello now offers added support for virtualization-based security with supporting fingerprint and face sensors. This feature isolates and secures a user’s biometric authentication data.

Virtualization

Windows Sandbox

New policies for Windows Sandbox are available in this release. For more information, see Policy CSP — WindowsSandbox.

Windows Virtual Desktop (WVD)

Note: WVD is not tied directly to a Windows 10 release, but it is included here as an evolving capability of Windows.

Windows Shell

Some enhancements to the Windows 10 user interface are implemented in this release:

• With this release, the solid color behind tiles on the Start menu is replaced with a partially transparent background. Tiles are also theme-aware.
• Icons on the Start menu no longer have a square outline around each icon.
• Notifications are slightly updated in appearance.
• You can now change the monitor refresh rate on advanced display settings.
• Alt+Tab now shows Edge browser tabs by default. You can edit this setting under Settings >System >Multitasking: Alt+Tab.
• The System control panel under System and Security has been updated to the Settings > About page. Links to Device Manager, Remote desktop, System protection, Advanced system settings, and Rename this PC are moved to the About page.

2-in-1 PCs

On a 2-in-1 device, Windows will now automatically switch to tablet mode when you detach the screen.

Surface

Windows 10 Pro and Enterprise are now available on Surface Hub 2. For more information, see What’s new in Surface Hub 2S for IT admins.

Desktop Analytics

Desktop Analytics is a cloud-connected service, integrated with Configuration Manager that provides data-driven insights to the management of Windows endpoints in your organization. Desktop Analytics requires a Windows E3 or E5 license, or a Microsoft 365 E3 or E5 license.

For information about Desktop Analytics and this release of Windows 10, see What’s new in Desktop Analytics.

Compare Windows 10 Home vs. Pro

Find the right fit for your needs. Check out our list of product offerings to see which Windows 10 version checks all of your boxes.

Windows Security

Windows 10 changes the game for security by protecting user identities, devices, and information with a comprehensive solution driven by intelligence that only Microsoft offers.

Expand All | Collapse All

Using facial recognition, a fingerprint, or PIN, Windows Hello is a fast, secure, and password-free way to unlock your compatible Windows devices.

Device encryption is available on a wide range of Windows devices and helps protect your data by encrypting it. If you turn on device encryption, only authorized individuals will be able to access your device and data.

Your Windows device comes with comprehensive, built-in security features, including firewall and internet protections to help safeguard against viruses, malware, and ransomware.

App & browser control in Windows Security provides the settings for Windows Defender SmartScreen, which helps protect your device from potentially dangerous apps, files, websites, and downloads.

Manage screen time, limit access to mature content, control online purchases when you connect your family’s Microsoft accounts, and check to make sure the family’s devices are secure and up to date.

Secure Boot helps prevent malicious software applications and unauthorized operating systems from loading during the system start-up process.

If your device is lost or stolen, BitLocker and BitLocker To Go put everything on lockdown, so no one else can access your systems or data.

WIP helps to protect against potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leaks on enterprise-owned devices and personal devices that employees bring to work, without requiring changes to your environment or other apps.

Windows Defender Antivirus uses the power of the cloud, wide optics, machine learning, and behavior analysis to protect your devices from emerging, sophisticated threats.

Windows Fundamentals

Windows 10 comes with automatic updates enabled, which means you get all the latest features at no extra cost. +

Expand All | Collapse All

Windows Fundamentals

Take notes, navigate, draw, doodle, edit, and create. Improve what you do with a digital pen. 6

Get faster browsing 7 8 and better battery life 8 9 across your devices with Microsoft Edge, the browser built for Windows 10.

All you have to do is ask Cortana. Your digital assistant on PCs and mobile devices can schedule a meeting, tell you when it’s time to leave for an appointment, or check the weather, news, and traffic.

Extend battery life by limiting background activity and push notifications.

Get instant access to your Android phone’s texts and photos on your PC, 11 or connect your iPhone for seamless browsing, calendar and app experiences. 12

Free up time and your hands by talking to your computer. Get information and reminders or listen to music and manage your emails and calendar. 13

Business Management and Deployment

Built-in security, productivity, and management features save you time, money, and hassle.

Expand All | Collapse All

Feature	Windows 10 Home	Windows 10 Pro

Business–Management and Deployment

Windows 10 mobile device management (MDM) provides an alternative to traditional PC management processes: you can transition to cloud based management at your own pace.

Manage PCs, user accounts, and groups, and get easy access to files and printers when you pair Windows 10 Pro with Windows Server. ** You can even define specific security and networking policies for your users and devices.

Available to any organization with an Azure AD Premium or Enterprise Mobility + Security (EMS) license, Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device.

Your one place to find, manage, and distribute apps to Windows 10 devices in volume.

With Assigned Access, Windows 10 Pro devices run different applications depending on the user and keep individual identities separate and secured.

With Dynamic Provisioning you can take a new PC out of the box, turn it on, and transform it into a productive organization device, with minimal time and effort.

Windows Update for Business can help businesses reduce management costs, provide control over update deployments, enable more efficient delivery of updates, and provide access to the latest innovations from Microsoft.

Configure a device in kiosk mode in a very simple way. You can do this locally on the device or remotely using Mobile Device Management.

Domain Join + Group Policy: IT staff can easily manage PCs, user accounts and groups, security policies, and get easy access to files and printers when you pair Windows 10 Pro with Windows Server. ** You can even define specific security and networking policies for your users and devices.

Employees can use a single login across Windows 10, Microsoft 365, *** and other Microsoft services, making logons and passwords easier to manage. The shared logon works on PCs, tablets, and phones with minimal IT involvement.

Go ahead, get creative

Edit photos and spice up presentations. Windows 10 has the apps you need to get in touch with your creative side.

Microsoft Office

Word, Excel, PowerPoint, and more—get everything you need to create and present your ideas with a Microsoft 365 subscription. ***

Digital pen and touch

Scribble down a headline, draw a chart, add bullet points—design an entire presentation with a digital pen. And on new Windows 10 touchscreen computers, you can zoom, scroll, and sign documents with the touch of a finger.

Photos

The new Photos app makes it fun and easy to enhance your digital memories. If you liked making videos with Windows Movie Maker, you’ll love what you can do with Photos.

Digital pen and touch

Scribble down a headline, draw a chart, add bullet points—design an entire presentation with a digital pen. And on new Windows 10 touchscreen computers, you can zoom, scroll, and sign documents with the touch of a finger.

Photos

The new Photos app makes it fun and easy to enhance your digital memories. If you liked making videos with Windows Movie Maker, you’ll love what you can do with Photos.

Microsoft Office

Word, Excel, PowerPoint, and more—get everything you need to create and present your ideas with a Microsoft 365 subscription. ***

Photos

The new Photos app makes it fun and easy to enhance your digital memories. If you liked making videos with Windows Movie Maker, you’ll love what you can do with Photos.

Microsoft Office

Word, Excel, PowerPoint, and more—get everything you need to create and present your ideas with a Microsoft 365 subscription. ***

Digital pen and touch

Scribble down a headline, draw a chart, add bullet points—design an entire presentation with a digital pen. And on new Windows 10 touchscreen computers, you can zoom, scroll, and sign documents with the touch of a finger.

Quickly capture your thoughts, tasks, and reminders

Use Sticky Notes and type, ink, or add a picture to save ideas, thoughts, lists, appointments, and more—so you don’t miss a thing!

More efficiencies, less energy

Windows 10 has apps and features to help you have fun and get more done with less hassle.

Timeline

Scroll through time to find documents and websites. 17

Voice, pen, and touch

Interact with your Windows 10 computer in new ways.

Windows Hello

Log into your Windows devices three times faster by using your face or fingerprint. *

Gaming

Windows 10 is built for the games you love.

Is your computer ready for Windows 10?

Windows 10 features are best experienced on a modern PC. Find out if your current PC is ready for Windows 10 by answering just a few questions.

Get Windows 10

Speed, security, durability, and great design—you really can have it all.

Get a new Windows 10 device

Get the Windows 10 OS

1 To use Windows Hello with biometrics specialized hardware, including fingerprint reader, illuminated IR sensor, or other biometric sensors is required. Hardware based protection of the Windows Hello credential/keys requires TPM 1.2 or greater; if no TPM exists or is configured, credentials/keys protection will be software-based.

2 Requires modern hardware (InstantGo/AOAC/HSTI-compliant). Review this doc for more details on Device Encryption.

3 Requires TPM 1.2 or greater for TPM based key protection.

4 Windows Information Protection requires either Mobile Device Management (MDM) or System Center Configuration Manager to manage settings in Windows 10 Pro. Active Directory makes management easier but is not required.

5 Windows Information Protection supports Mobile Application Management (MAM) for use in Home edition only.

6 Pen capable tablet or PC required. Pen accessory may be sold separately.

7 Performance claims based upon Jetstream 1.1 tests using Microsoft Edge 18 vs. Chrome 69 and Firefox 62. Go here for more details on this performance claim.

8 Availability and functionality may vary on non-Windows devices.

9 Based on average times; battery life varies significantly with settings, usage and other factors. Go here for more details on this battery life claim.

10 Cortana available in select markets; experience may vary by region and device.

11 Users must link their Android phone to their Windows PC in PC settings. Users will receive an app from Microsoft which they must download to their Android phone and follow the setup prompts, including being signed into same Microsoft Account across mobile apps and Windows 10 PC.

12 Users must link their iPhone to their PC in PC settings. Users will receive an app from Microsoft which they must download to their iPhone and follow the setup prompts.

13 Hardware dependent. Available on limited select devices supporting far-field capabilities. Connect email accounts in the Cortana Notebook; works with Outlook.com, Microsoft 365 and Gmail. Microsoft 365 requires a subscription.

14 Not all MDM capabilities are available in the Home SKU. MDM requires an MDM product such as Microsoft Intune or other 3rd-party solutions (sold separately).

15 Separate subscription for Azure Active Directory Premium required.

16 Available in select markets. Functionality and apps may vary by market and device.

17 Timeline shows 3-5 days of past activities, including activities done on a tablet and mobile phone when users are signed into their Microsoft accounts. To see up to 30 days of activities, users must choose this option in settings. Available in select markets. Functionality may vary by device.

* Based on average time comparison between typing a password and detecting a face or fingerprint in order to successfully authenticate. Requires specialized hardware, including fingerprint reader, illuminated IR sensor or other biometric sensors and capable devices.

+ Additional requirements may apply for ongoing updates.

*** Microsoft 365 subscription sold separately.

Feature	Windows 10 Home	Windows 10 Pro