Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Windows 11 systems must be maintained at a supported servicing level.
Description
Discussion Text
Windows 11 is maintained by Microsoft at servicing levels for specific periods of time to support Windows as a Service. An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software. Systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities which leaves them subject to exploitation.
The type of servicing channel used will determine the frequency of OS updates and length of support. Under the General Availability Channel (GAC), Microsoft releases one major feature update per year (typically in the second half of the calendar year, e.g., Version 24H2). For Windows 11 Enterprise, each annual GAC release receives 36 months of support. The Long-Term Servicing Channel (LTSC) is designed for highly regulated, air-gapped, or mission-critical military/tactical environments. Microsoft releases a new LTSC version approximately every 2 to 3 years. Windows 11 Enterprise LTSC receives five years of lifecycle support (quality and security updates only; no feature updates).
Many Microsoft software updates and fixes are regularly combined into a single package (called a service pack) that is made available for installation. Both the Mainstream Support and Extended Support phases for software require a product's supported service pack to be installed to continue to receive full support. Microsoft publishes specific support timelines for a previous service pack when the new service pack is released. Systems must install a fully supported service pack to ensure they are on the latest and most secure version of their product.
The type of servicing channel used will determine the frequency of OS updates and length of support. Under the General Availability Channel (GAC), Microsoft releases one major feature update per year (typically in the second half of the calendar year, e.g., Version 24H2). For Windows 11 Enterprise, each annual GAC release receives 36 months of support. The Long-Term Servicing Channel (LTSC) is designed for highly regulated, air-gapped, or mission-critical military/tactical environments. Microsoft releases a new LTSC version approximately every 2 to 3 years. Windows 11 Enterprise LTSC receives five years of lifecycle support (quality and security updates only; no feature updates).
Many Microsoft software updates and fixes are regularly combined into a single package (called a service pack) that is made available for installation. Both the Mainstream Support and Extended Support phases for software require a product's supported service pack to be installed to continue to receive full support. Microsoft publishes specific support timelines for a previous service pack when the new service pack is released. Systems must install a fully supported service pack to ensure they are on the latest and most secure version of their product.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.