Where do I get a copy of Win 11 23H2

Topic

New Reply

Does anyone have a reliable (download) source for Win 11 23H2?

Thanks

Reply | Quote

Replies

I made some progress on locating a way to download Win 11 previous versions.  Using the Ave Yo/ MediaCreation script, I was able to download 23H2.  But when I use Rufus to create a bootable ISO installation on a USB thumb drive, I get this warning.

 

Recommendations?

Reply | Quote

Rufus gives the same warning for ISO files that are downloaded directly from Microsoft and, as the warning states (note: highlightling is mine):

will produce a “Security Violation” screen, when Secure Boot is enabled on a fully up to date UEFI system.

So, unless the PC you intend to use it on has Secure Boot enabled, it won’t cause a problem.

BTW, the fact even “official” Microsoft ISO downloads cause the same warning means Microsoft hasn’t even updated their own ISO files with a new version of the bootloader!

1 user thanked author for this post.

PL1

Reply | Quote

I just dealt with this when preparing a Windows 10 22H2 USB with Rufus.

Updated versions of Rufus warn about UEFI bootloaders that were revoked as part of dealing with the BlackLotus UEFI bootkit exploit, and Microsoft is not updating old ISOs with patched bootloaders.

The key phrase in that warning is “when Secure Boot is enabled on a fully up to date UEFI system“.

If you haven’t previously gone through IT pro level steps to revoke vulnerable bootloaders, or if you don’t use Secure Boot at all, you can ignore that warning from Rufus. Such a system will still trust the revoked bootloader and will boot that ISO just fine.

Last year, Susan recommended Consumer users not do anything about this, and shared more details (and links) in the Businesses section of the same alert.
https://www.askwoody.com/newsletter/ms-defcon-4-safe-for-now/
As I understand it, the situation has yet to be fully resolved.

Oh, and I don’t think you have to worry about the “non reputable” part of the warning, as supposedly AveYo’s script fetches the official ISO from a Microsoft server.

1 user thanked author for this post.

PL1

Reply | Quote

https://massgrave.dev/windows_11_links

2 users thanked author for this post.

Endora, SkipH

Reply | Quote

Can I use these ISO to perform an UPGRADE from Windows 10 22H2 to Windows 11 23H2?  I have some Win10 laptops that I would rather NOT get Windows 11 24H2 via the Microsoft Update route…

Thanks, Steve

1 user thanked author for this post.

Microfix

Reply | Quote

n0ads wrote:

Rufus gives the same warning for ISO files that are downloaded directly from Microsoft and, as the warning states (note: highlightling is mine):

will produce a “Security Violation” screen, when Secure Boot is enabled on a fully up to date UEFI system.

So, unless the PC you intend to use it on has Secure Boot enabled, it won’t cause a problem.

BTW, the fact even “official” Microsoft ISO downloads cause the same warning means Microsoft hasn’t even updated their own ISO files with a new version of the bootloader!

this is normal behavior for Rufus (aka. “by design”) only with ISOs for Win11 23H2, Win10 22H2 and older Windows versions. the “warning” does not show up with Win11 24H2 ISOs as the updated bootloaders are included in the 24H2 ISO images.

1 user thanked author for this post.

PL1

Reply | Quote

VVet69 wrote:

Can I use these ISO to perform an UPGRADE from Windows 10 22H2 to Windows 11 23H2?  I have some Win10 laptops that I would rather NOT get Windows 11 24H2 via the Microsoft Update route…

Thanks, Steve

@VVet69

you could use the Win11 23H2 ISOs from that link (even though they only have the November 2024 cumulative updates included). but that site will no longer publish new 23H2 ISOs with newer updates though

therefore, download & use at your own risk when going to that site as the rest of us here are not responsible if things go sideways

Reply | Quote

VVet69 wrote:

Can I use these ISO to perform an UPGRADE from Windows 10 22H2 to Windows 11 23H2?  I have some Win10 laptops that I would rather NOT get Windows 11 24H2 via the Microsoft Update route…

You can use InControl (or TRV in GPEdit on Pro version) to set your Windows 10 to Windows 11 23H2 and just run Windows update.

3 users thanked author for this post.

glnz, owlyn, VVet69

Reply | Quote

Alex – this may be exactly what I’m looking for.

Looks like this will upgrade the two or three Win 10 Pro PCs in my wife’s small business office to Win 11 Pro 23H2 while keeping all apps, files etc., yes?

1. Has anyone here actually done this since the advent of 24H2, and does it work?
2. Please point me to the links for “InControl (or TRV in GPEdit on Pro version)”
3. Isn’t there a way to specify Win 11 Pro 23H2 manually in Group Policy Edit?  I’ve forgotten how to get there – what is the forum page here for that?

Thanks!

 

Reply | Quote

Using InControl is easiest. Search this site for details.

cheers, Paul

1 user thanked author for this post.

glnz

Reply | Quote

See section 5 of AKB2000016 about setting up TRV in Win10. The Product Version = Windows 11 the Target Version = 23H2. There are screenshots linked at the bottom.

OR

Download InControl from GRC.

I would recommend you use one or the other, not both.

 

1 user thanked author for this post.

glnz

Reply | Quote

Thanks everyone for the information. I should be able to turn off secure boot in the bios. This will be a clean install since there’s no other programs on this computer.

Reply | Quote

Do not turn off secure boot.
Try booting the ISO/USB. If it boots you don’t need to change anything.

cheers, Paul

Reply | Quote

glnz wrote:

Isn’t there a way to specify Win 11 Pro 23H2 manually in Group Policy Edit?

Yes, TRV (Targeted Release Version) setting in GPEdit

Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business

Select the Target Feature Update Version”.

Double-click on it, set it to Enabled, and specify the desired Windows version

InControl

1 user thanked author for this post.

glnz

Reply | Quote

 

Alex -thanks!!

And for those like me who forget this stuff, one reaches Group Edit via Win + R and then type gpedit.msc .

 

Reply | Quote

glnz wrote:

And for those like me who forget this stuff, one reaches Group Edit via Win + R and then type gpedit.msc .

Or, just type GPEdit in the search box.

1 user thanked author for this post.

glnz

Reply | Quote

Follow-up Q to my post above ( https://www.askwoody.com/forums/topic/where-do-i-get-a-copy-of-win-11-23h2/#post-2749974 ) and your great answers so far:

If I use TRV to let my wife’s business’s three Win 10 Pro PCs update themselves to Win 11 23H2 AND keep all their apps and data (right?), will the new Win 11 prompt me to set up a MS account?  (I’m pretty sure I avoided MS accounts when I got the Win 10 Pro PCs and started them up three years ago.)

If I get bugged to set up a MS account in the new Win 11, how can I force Win 11 to skip that step, in this particular context, so I can stay local?

Detail – there are two users on each of the three PCs, the second user on each PC if one of my wife’s employees, and that user has her own share of a MS 365 Family subscription (five or six users) with an outlook.com email name that was created specifically for that share of MS 365 Family (different outlook.com emails for each of the three PC users).  Does this change your advice above?

Thanks.

Reply | Quote

If you use TRV (or InControl) to trigger the update from Win10 to Win11, it will keep your files and apps AND the IDs as they are currently set up. It will preserve Local IDs if that’s what you currently have, or MS IDs if that’s what you have.
Where you have to worry is if you do a clean install you may have to go through the OOBE asking for the creation of new IDs.

*Good idea to be sure the h/w drivers are up to date ahead of time.
Be sure your PCs are Win11 compatible AND be sure you have a current full disk image of each with a verified bootable Rescue disk made by the imaging software BEFORE you start. You will have 10 days to roll back if you have a problem.

1 user thanked author for this post.

glnz

Reply | Quote