What’s new in Windows 10, version 1909 for IT Pros

Applies to

• WindowsВ 10, version 1909

This article lists new and updated features and content that are of interest to IT Pros for Windows 10, version 1909, also known as the Windows 10 November 2019 Update. This update also contains all features and fixes included in previous cumulative updates to Windows 10, version 1903.

Servicing

Windows 10, version 1909 is a scoped set of features for select performance improvements, enterprise features and quality enhancements.

To deliver these updates in an optimal fashion, we are providing this feature update in a new way: using servicing technology. Users that are already running Windows 10, version 1903 (the May 2019 Update) will receive this update similar to how they receive monthly updates. If you are running version 1903, then updating to the new release will have a much faster update experience because the update will install like a monthly update.

If you are updating from an older version of Windows 10 (version 1809 or earlier), the process of updating to the current version will be the same as it has been for previous Windows 10 feature updates. For more information, see Evolving Windows 10 servicing and quality: the next steps.

Note: Devices running the Enterprise, IoT Enterprise, or Education editions of Windows 10, version 1909 receive 30 months of support. For more information about the Windows servicing lifecycle, please see the Windows lifecycle fact sheet.

Windows Server Update Services (WSUS)

Pre-release Windows 10 feature updates are now available to IT administrators using WSUS. Microsoft Endpoint Manager version 1906 or later is required. For more information, see Publishing pre-release Windows 10 feature updates to WSUS.

The Windows 10, version 1909 enablement package will be available on WSUS as KB4517245, which can be deployed on existing deployments of Windows 10, version 1903.

Windows Update for Business (WUfB)

If you are using WUfB, you will receive the Windows 10, version 1909 update in the same way that you have for prior feature updates, and as defined by your feature update deferral policy.

Security

Windows Defender Credential Guard

Windows Defender Credential Guard is now available for ARM64 devices, for additional protection against credential theft for enterprises deploying ARM64 devices in their organizations, such as Surface Pro X.

Microsoft BitLocker

BitLocker and Mobile Device Management (MDM) with Azure Active Directory work together to protect your devices from accidental password disclosure. Now, a new key-rolling feature securely rotates recovery passwords on MDM managed devices. The feature is activated whenever Microsoft Intune/MDM tools or a recovery password is used to unlock a BitLocker protected drive. As a result, the recovery password will be better protected when users manually unlock a BitLocker drive.

Key-rolling and Key-rotation

Windows 10, version 1909 also includes two new features called Key-rolling and Key-rotation enables secure rolling of Recovery passwords on MDM managed AAD devices on demand from Microsoft Intune/MDM tools or when a recovery password is used to unlock the BitLocker protected drive. This feature will help prevent accidental recovery password disclosure as part of manual BitLocker drive unlock by users.

Transport Layer Security (TLS)

An experimental implementation of TLS 1.3 is included in Windows 10, version 1909. TLS 1.3 disabled by default system wide. If you enable TLS 1.3 on a device for testing, then it can also be enabled in Internet Explorer 11.0 and Microsoft Edge by using Internet Options. For beta versions of Microsoft Edge on Chromium, TLS 1.3 is not built on the Windows TLS stack, and is instead configured independently, using the Edge://flags dialog. Also see Microsoft Edge platform status.

Virtualization

Windows Sandbox

Windows Sandbox is an isolated desktop environment where you can install software without the fear of lasting impact to your device. This feature is available in Windows 10, version 1903. In Windows 10, version 1909 you have even more control over the level of isolation.

Windows Virtual Desktop

Windows Virtual Desktop (WVD) is now generally available globally!

Windows Virtual Desktop is a comprehensive desktop and app virtualization service running in the cloud. It’s the only virtual desktop infrastructure (VDI) that delivers simplified management, multi-session Windows 10, optimizations for Microsoft 365 Apps for enterprise, and support for Remote Desktop Services (RDS) environments. Deploy and scale your Windows desktops and apps on Azure in minutes, and get built-in security and compliance features. Windows Virtual Desktop requires a Microsoft E3 or E5 license, or a Microsoft 365 E3 or E5 license, as well as an Azure tenant.

Deployment

Microsoft Endpoint Manager

Configuration Manager, Intune, Desktop Analytics, Co-Management, and Device Management Admin Console are now Microsoft Endpoint Manager. See the Nov. 4 2019 announcement. Also see Modern management and security principles driving our Microsoft Endpoint Manager vision.

Windows 10 Pro and Enterprise in S mode

You can now deploy and run traditional Win32 (desktop) apps without leaving the security of S mode by configuring the Windows 10 in S mode policy to support Win32 apps, and deploy them with Mobile Device Management (MDM) software such as Microsoft Intune. For more information, see Allow Line-of-Business Win32 Apps on Intune-Managed S Mode Devices.

SetupDiag

SetupDiag version 1.6.0.42 is available.

SetupDiag is a command-line tool that can help diagnose why a Windows 10 update failed. SetupDiag works by searching Windows Setup log files. When searching log files, SetupDiag uses a set of rules to match known issues. In the current version of SetupDiag there are 53 rules contained in the rules.xml file, which is extracted when SetupDiag is run. The rules.xml file will be updated as new versions of SetupDiag are made available. .

Windows Assessment and Deployment Toolkit (ADK)

A new Windows ADK will not be released for Windows 10, version 1909. You can use the Windows ADK for Windows 10, version 1903 to deploy Windows 10, version 1909.

Desktop Analytics

Desktop Analytics is now generally available globally! Desktop Analytics is a cloud-connected service, integrated with Configuration Manager, which gives you data-driven insights to the management of your Windows endpoints. It provides insight and intelligence that you can use to make more informed decisions about the update readiness of your Windows endpoints. Desktop Analytics requires a Windows E3 or E5 license, or a Microsoft 365 E3 or E5 license.

Microsoft Connected Cache

Together with Delivery Optimization, Microsoft Connected Cache installed on Windows Server or Linux can seamlessly offload your traffic to local sources, caching content efficiently at the byte range level. Connected Cache is configured as a “configure once and forget it” solution that transparently caches content that your devices on your network need.

Accessibility

This release adds the ability for Narrator and other assistive technologies to read and learn where the FN key is located on keyboards and what state it is in (locked versus unlocked).

Processor requirements and enhancements

Requirements

Windows Processor Requirements have been updated for this version of Windows.

Favored CPU Core Optimization

This version of Windows 10 will include optimizations to how instructions are processed by the CPU in order to increase the performance and reliability of the operating system and its applications.

When a CPU is manufactured, not all of the cores are created equal. Some of the cores may have slightly different voltage and power characteristics that could allow them to get a «boost» in performance. These cores are called «favored cores» as they can offer better performance than the other cores on the die.

With Intel Turbo Boost Max Technology 3.0, an operating system will use information stored in the CPU to identify which cores are the fastest and then push more of the CPU intensive tasks to those cores. According to Intel, this technology «delivers more than 15% better single-threaded performance».

Debugging

Additional debugging capabilities for newer Intel processors have been added in this release. This is only relevant for hardware manufacturers.

Efficiency

General battery life and power efficiency improvements for PCs with certain processors have been added in this release.

What’s new in the Windows 10 October 2020 Update

The Windows 10 October 2020 Update has started to become available to customers as a free update.

This year has continued to bring about change for many of us. Change in how we connect to one another, how we work, how we learn, even how we have fun. And that change is starting to feel more permanent, especially with kids going back to school adapting to remote learning and connection with their teachers and classmates or workplaces shifting to hybrid environments. Throughout all of this, the PC has become the essential device to keep us connected across our lives; it’s become our office, our classroom, even our playground. As we all adapt, live and learn through this together, one constant that remains is our commitment to you, our customers. We know you are counting on us, on Windows to stay connected to what matters.

As part of this commitment, we’re pleased to share the features and improvements coming with the Windows 10 October 2020 Update, many of which are requested features from you to help make your experience on Windows even better. Some of the new features include the fan favorite shortcut Alt + Tab which now lets you access your Microsoft Edge tabs, a streamlined design for the Start menu and more. If you’re interested in learning how to get the update you can visit this blog post to learn more.

Here’s what’s new in the Windows 10 October 2020 Update

Microsoft Edge

With this update comes the latest and greatest version of the new Microsoft Edge. Since launching back in January, we’ve seen phenomenal growth and we’re excited it’s included in this update. If you haven’t yet tried the new Microsoft Edge, you should launch it and try it out since we’ve built a better browser with more performance, more privacy and more value back while you browse. If you’re already using our new browser, then you’ve seen first-hand how fast it is and we’re adding great new features every six weeks. Try out Collections to easily save and share content you find online. It’s perfect for holiday shopping, school research and even planning next spring’s camping trip. And it works across PC and mobile so you’re always in sync. We’ve also added Price Comparison so you can easily find the best price when you add an item to a collection, just in time for holiday shopping. In fact, we’re proud to say Microsoft Edge is the best browser for shopping this holiday.

With this update you also get these new, exclusive to Windows 10 features for Microsoft Edge:

• Alt + Tab = The quick way to access your apps and web tabs. With this handy keyboard shortcut not only can you easily access the apps you have open on your desktop, but now you can also access your open tabs in Microsoft Edge.
• All the tabs you were looking for. If you’re someone who likes the convenience of pinning your favorite websites to the taskbar, you’re going to love this new feature. Now when you hover over the website icon, you’ll see all the open tabs of that site.

Refreshing updates from the Start menu to the Taskbar and more

• A refreshing Start. The Start menu has a more streamlined design. A uniform, partially transparent background to the tiles creates a beautiful stage for the redesigned app icons like Calculator, Mail and Calendar. This refined Start design looks great in both dark and light themes, but if you’re looking for a splash of color, first make sure to turn on Windows dark theme and then toggle “Show accent color on the following surfaces” for “Start, taskbar, and action center” under Settings > Personalization > Color to elegantly apply your accent color to the Start frame and tiles.
• Smooth Settings. Settings continues to become a more robust place to access security and device details. Also, now when you go to Settings > System > Display, Advanced display settings, you can change the refresh rate of your display. A higher refresh rate allows for smoother motion of visuals, and depending on what kind of display or monitor you have, you may be able to really crank it up—makes for a great gaming experience.
• 2 in 1 toast elimination. 2-in-1 devices now naturally switch by default to the new tablet experience without the notification toast asking you to switch into the tablet mode when you detach the keyboard, helping to keep you in your flow.
• Noticeable notifications. New app logos at the top of notifications now make it much easier to identify who they are from. And the new “X marks the spot” lets you quickly click, close and get back at it.
• A Taskbar tuned to your liking. Getting a new Windows PC? You will enjoy a cleaner, more personalized, out-of-box experience featuring a taskbar specifically curated for you—less clutter and more content that you’ll love. (This experience is limited to new account creation or first logon scenarios.)

Updates for commercial and education customers

In addition to a smoother user experience, commercial and education customers also get enhanced security and management. Feature updates include more granular control in Mobile Device Management (MDM) 1 , stronger sign-in protection with enhanced sign-in security, and virtualization-based security for both Microsoft Edge and Office. Whether people are working or learning onsite or remotely, IT pros and end users will gain a simpler, more secure experience with the latest Windows 10 Pro or Windows 10 Education.

• Simpler device management. Mobile Device Management (MDM) 1 now includes a Local Users and Groups policy that gives administrators the same options as on-premises Group Policy.
• More secure biometric sign on. With enhanced sign-in security 2 , Windows Hello 3 now offers added support for virtualization-based security for certain fingerprint and face sensors, which protects, isolates and secures a user’s biometric authentication data.
• Stronger app protection. Now available in public preview, Windows Defender Application Guard (WDAG) 4 now helps protect Microsoft 365 5 as well as Microsoft Edge with a unique hardware isolation strategy. WDAG keeps enterprise data protected by opening sites and Office files from untrusted sources in a virtualized container.*

• Personalized tab page in the new Microsoft Edge. IT administrators can help employees, students and teachers personalize their new tab page with Microsoft 365 5 . Now, people can access their files and favorite Microsoft 365 apps more quickly just by opening a new tab in their browser. To learn more about what this update means for IT Pros, visit this blog post.

We continue to believe that Windows is the most powerful, productive and secure place for each of us to do our best work, to have fun, learn and connect. We are excited to share the latest features coming as part of the Windows 10 October 2020 Update. We also want to say a big thank you to our community of Windows Insiders who have provided important feedback throughout the development process for this update.

*Editor’s note — Oct. 28, 2020 — This blog was updated to clarify that the new capabilities in Windows Defender Application Guard are in public preview with the Windows 10 October 2020 Update.

1 Requires Azure AD or Microsoft 365. Sold separately. Learn more about Mobile Device Management, https://docs.microsoft.com/windows/client-management/mdm/.

2 Enhanced sign-in security requires specialized hardware and software components that can be leveraged starting on devices shipping with Windows 10 October 2020 Update configured out of factory. Documentation will be available later this year.

3 For Windows Hello with biometrics specialized hardware, a fingerprint reader, illuminated IR sensor, or other biometric sensor is required. Hardware-based protection of the Windows Hello credential/keys requires TPM 1.2 or greater. If no TPM exists or is configured, credentials/keys protection will be software-based. Requires TPM 1.2 or greater for TPM based key protection.

4 For Windows 10 Enterprise only.

5 Requires Microsoft 365 E5 subscription; sold separately.