Windows 11 23H2 vs. 24H2: A Closer Look at Performance and Security

As Windows 11 continues to evolve, Microsoft regularly rolls out feature updates, bringing new functionalities, refinements, and under-the-hood improvements. The 23H2 and 24H2 releases are two such significant updates, and users often wonder about their impact on system performance and security. Let’s delve into what these versions offer in these critical areas.

Performance: Subtle Gains and Specific Optimizations

And if you are looking for in-depth knowledge in Windows Servers and Hybrid Windows Servers, please do check it these courses: https://www.cloudthat.com/training/azure/exam-az-800-administering-windows-server-hybrid-core-infrastructure

https://www.cloudthat.com/training/azure/exam-az-801-configuring-windows-server-hybrid-advanced-services

However, 24H2 introduces some noteworthy optimizations, particularly for specific hardware and use cases:

Gaming: While overall gaming performance remains largely similar across many titles, 24H2 shows promise with modern technologies like Frame Generation (e.g., NVIDIA DLSS 3). Systems leveraging these features might see noticeable FPS improvements. Some reports also suggest potential performance boosts for AMD Ryzen processors on 24H2, though this can be dependent on specific driver configurations. Conversely, some users have reported minor performance dips or stuttering in certain scenarios, especially on older or less optimized systems, although many of these issues are often rectified with subsequent patches.

Resource Management: 24H2 demonstrates improved RAM allocation for memory-intensive applications, which can benefit power users with 32GB or more RAM running multiple demanding programs. It also introduces an Energy Saver mode, distinct from the traditional Battery Saver, aimed at reducing overall energy consumption from background tasks, potentially leading to better battery life on laptops.

File Operations: Minor improvements have been observed in areas like 7-Zip compression speeds in 24H2, indicating some underlying optimizations in file handling. The revamped File Explorer in 23H2, further refined in 24H2, also contributes to a snappier feel for file navigation.

Boot and Responsiveness: Some users have reported that 24H2 feels slightly snappier in terms of boot times and overall UI responsiveness, particularly after a clean installation and some debloating.

It’s crucial to remember that performance can be highly subjective and dependent on individual hardware configurations, installed applications, and user habits. While 24H2 aims for incremental improvements, a dramatic speed boost isn’t its primary focus for all scenarios.

Security: A Continuous Fortification

Security is an area where Microsoft consistently invests heavily with each Windows update, and 24H2 is no exception. Building upon the robust foundation of 23H2, the newer version introduces further enhancements to protect users from evolving threats.

Key security improvements in 24H2 include:

SMB Signing by Default: It is an immense leap into the security improvement in 24H2 as it is the default requirement for SMB signing to all connections on Home, Pro, Education and Enterprise editions. This ensures that every message contains a signature generated using a session key and cipher suite, making it harder for attackers to intercept and tamper with data during network communication. This adds a crucial layer of protection against various network-based attacks.

JScript Engine Improvements: 24H2 features an improved scripting engine (JScript9Legacy.dll replacing JScript.dll). This new engine is designed to be more compatible with modern web standards and incorporates advanced security features, making it significantly harder for malicious scripts to exploit the system, mitigating risks like cross-site scripting (XSS) and remote code execution.

LAPS Policy Improvements: The Local Administrator Password Solution (LAPS) receives policy enhancements, including passphrase settings for password complexity and an improved readability setting for generated passwords. Expanded event logging messages also provide better insights into post-authentication actions.

BitLocker Encryption by Default: For new installations, BitLocker encryption is now enabled by default, offering out-of-the-box data protection.

Enhanced Privacy Controls: Features like Recall (exclusive to Copilot+ PCs) are designed with enhanced privacy controls, ensuring data is stored locally and secured via Windows Hello authentication.

Sudo for Windows: While primarily a developer feature, the introduction of sudo for Windows allows for running elevated commands directly from an un-elevated console, potentially reducing the need to frequently open separate administrative command prompts, which can subtly improve overall security practices by minimizing elevated sessions.

Continuous Innovation Model: Microsoft’s ongoing “continuous innovation” approach means that both 23H2 and 24H2 benefit from a steady stream of security patches and non-security preview updates throughout their lifecycle, ensuring prompt addressing of new vulnerabilities.

In summary, while performance gains from Windows 23H2 to 24H2 are more iterative and context-dependent, the security landscape sees more significant, foundational improvements. The increased default security measures and continuous patching make 24H2 a more secure operating environment. For users prioritizing the latest security protections and willing to embrace new AI-powered features, upgrading to 24H2 is a logical step. However, those on 23H2 will still benefit from ongoing security updates and a highly capable operating system.

About CloudThat