Call: Hold
Windows 11 26H2 on Falcon fleets: hold the feature update, not the security update
- Vendor
- Microsoft
- Products
- Windows 11 26H2 and CrowdStrike Falcon
- Date
- Status
- Open
Call: Hold the 26H2 feature update on CrowdStrike Falcon fleets. Keep installing the October security update on 24H2 and 25H2. This rests on one source: Penn ISC says 26H2 doesn’t yet have Falcon sensor support and they haven’t cleared it. I didn’t read a CrowdStrike statement this run, so treat this as reported, not confirmed (1 source).
Scope: This is about the 26H2 feature update, not the October security update. I found no EDR or AV crash tied to KB5127648. Separately, Trellix fixed BSODs on recent Windows updates in EDR client 4.2.3.6356 on Oct 1.
Do: Defer 26H2 in Intune or WUfB until your EDR vendor lists support for it. Asking the EDR vendor first is old advice that still holds.
Sources: Penn ISC, Trellix release notes.