Microsoft Scales Back Features in Older Windows 11 Builds

Microsoft has updated its support policy for VBS enclaves — a security feature that isolates sensitive data within the operating system. According to newly revised documentation, the technology will no longer be available in Windows 11 version 23H2 and earlier, remaining exclusive to the latest 24H2 build and beyond. VBS enclaves provide secure zones for storing passwords, encryption keys, and other confidential data, shielding them from access by other applications — even the system kernel. This helps reduce the risk of data leaks in the event of malware attacks.

For most users, the change will go unnoticed, as everyday tasks are unaffected. However, developers relying on this technology may encounter issues: without VBS enclave support in older Windows versions, certain features in their applications might not function properly. Testing such solutions is now only possible on Windows 11 24H2.

Experts point out that Microsoft isn’t introducing new protections in 24H2, but rather redistributing existing ones. It’s an unusual move: instead of encouraging updates by adding features, the company is removing functionality from outdated versions. Windows 11 version 23H2 will continue receiving updates until November 11, 2025 — but without VBS enclaves, it’s more vulnerable compared to 24H2. To minimize security risks, users are advised to upgrade to the latest version before support ends.