What is an Enablement Package in Windows?

  • An Enablement Package is a lightweight patch that activates already installed features, allowing you to switch from one version of Windows to another with a single restart.
  • Windows 10 2004→20H2 and Windows 11 24H2→25H2 share kernel and service branch, so the eKB only changes internal flags and the support cycle.
  • Windows 11 25H2 prioritizes security, AI and removal of legacy components, and is distributed as an enablement package over 24H2 through phased deployment.
  • Using eKB outside of supported scenarios, such as forcing builds in LTSC/IoT, can create hybrid systems that are difficult to maintain despite being able to install manual patches.

How does the Enablement Package work in Windows?

If you use Windows daily, you've probably come across version names like 20H2, 21H2, 22H2, 24H2, or 25H2, and at some point, the term "version" might sound familiar. Enablement PackageAt first glance, it seems like just another Microsoft label, but behind it lies a significant change in how major system updates are delivered.

In recent years, Microsoft has moved from the typical "major updates" that changed everything to a model where many new features arrive hidden and are only activated with a small patch. That patch is, precisely, the Enablement Package: a switch that unlocks already installed features, reduces downtime, simplifies deployment in companies, and defines how long your version of Windows will be supported.

What is an Enablement Package in Windows?

An Enablement Package (eKB) is a Very lightweight update that acts as a master switch To upgrade one version of Windows to a newer one without reinstalling the entire system. Instead of downloading several gigabytes and rebuilding half the operating system, the eKB simply activates features that were already present but dormant in your installation.

In versions such as Windows 10 2004 and 20H2, or Windows 11 24H2 and 25H2, both editions They share the same kernel, the same service branch, and virtually the same system filesNew features are delivered in advance within monthly cumulative updates and are kept disabled. When you install the enablement package, the system changes a number of “internal flags” and it becomes known as the new version.

This means that the enablement package is not a complete ISO, nor a traditional version installer, but a A patch of a few hundred megabytes that installs in minutesIn terms of user experience, it's much more like applying a monthly patch than a major version jump, with only one restart and minimal downtime.

How to activate incognito mode in Windows 11
Related article:
Windows 11 25H2: All the new features

Thanks to this strategy, Microsoft can offer annual feature updates using the same mechanics as security patchesFor the user, the visual change is often small, but relevant improvements in security, compatibility, AI are activated and, above all, a new support cycle begins (24 or 36 months depending on the edition).

How does an Enablement Package work internally?

When a team is a candidate to receive an eKB, it has actually already been receiving one for weeks or months. cumulative updates that contain new featuresbut in a latent state. The enable package then acts as the "final OK" that tells the system: now, put all this into action.

Under the hood, the enablement package does three key things: Mark as active the new features included in previous builds, update the version number you see in "About your PC" and align your system with the new maintenance and support cycleThe codebase remains the same, but what components are considered active and what lifecycle policies apply change.

A very clear example was Windows 10 2004 → 20H2. Both versions shared an identical set of files, and the improvements in 20H2 were released as part of the monthly patches for 2004. When you installed the enabling KB (KB4562830, in supported editions), these features were activated, and the system began to display “Windows 10, version 20H2” And all of this with a single restart.

In the case of Windows 11 24H2 and 25H2, something very similar happens: both use the same service branchThey share the same codebase and receive the same monthly updates. The 25H2 eKB simply unlocks a set of improvements and locks the system into the new support cycle, without forcing you to reinstall from scratch.

Classic example: from Windows 10 2004 to 20H2

The enablement package model was clearly seen with the transition between Windows 10 version 2004 and 20H2Microsoft officially explained that both versions share a common core and an identical set of files, and that the new features of 20H2 were delivered within the October 2020 quality update for 2004.

Those new functions remained inactive and hidden until the eKB was installed. This package acted as a "master switch" that, with a single quick installation, transformed the 2004 version into 20H2. On computers that update directly from Windows Update, the service itself downloaded the Feature Update to Windows 10, version 20H2, which included the enablement package.

If the device was an older version, such as 1909 or earlier, the film would change. In that scenario, You couldn't install the eKB separatelyIt was included within the full feature update package, which did involve downloading a larger image and a considerably longer installation time.

In corporate environments with WSUS, the enablement package was synchronized as an update of type “Upgrades”It was enough to have the "Windows 10" product configured and the correct classification for it to be distributed just like other updates, allowing administrators to activate 20H2 en masse with a single patch.

Windows 11 25H2 as a lightweight enablement pack

Windows 11 version 25H2 (the 2025 update of Windows 11) is currently the most representative example of enablement package in the modern Microsoft ecosystem. The company itself describes it as a “lightweight enablement package”, that is, a lightweight enablement package that is applied on top of Windows 11 24H2.

Both versions share the same service branch, the same codebase, and the same maintenance channel24H2 has been receiving, through cumulative builds and patches, many of the features that 25H2 activates all at once: security improvements, AI-related changes, cleaning up old components, and new management options for businesses.

When the time comes, 25H2 is installed over 24H2 as if it were one more cumulative updateThe package size is around a few hundred megabytes, installation time is usually just a few minutes, and the entire process is completed with a single restart. As a result, after the reboot, your computer will identify itself as Windows 11 25H2, with minimal downtime.

The key difference is that 25H2 doesn't aim to be a visual revolution. Microsoft has focused on consolidate stability, strengthen security, and better integrate AI functions which I had already been testing in the Windows Insider program. Many of these features were "dormant" in 24H2, so the eKB brings them to life without needing to reinstall the entire system.

Windows 11 25H2 release, deployment, and support date

Enablement Package in Windows 11

Windows 11 25H2 first appeared on the Windows Insider Program Release Preview channelwith builds like 26200.5074. This was the first wave of semi-stable public availability, intended for those who want to test the update before its mass release.

The general deployment of 25H2 is carried out in a gradual and controlled through Windows Update, fitting into Microsoft's annual update policy. The company activates a system of Controlled Feature Rollout (CFR) which is increasing the percentage of equipment that receives the eKB, while simultaneously applying "safeguard holds" where it detects incompatibilities with drivers or applications.

For users who are already on Windows 11 24H2 and have the option enabled "Receive the latest updates as soon as they are available"The 25H2 enablement package usually arrives sooner, provided your system isn't blocked by a known issue. If your PC has conflicts with certain drivers, the system may postpone the update until a patch is available to fix the problem.

How to rebuild the Windows 11 Start Menu without external software
Related article:
What to expect from upcoming Windows 11 updates

Regarding support, 25H2 marks a significant change: the editions Enterprise and Education move to a 36-month support cycleWhile the Home and Pro editions maintain the usual 24 months. In practical terms, for companies and organizations that want long-term stability, It is worth activating 25H2 via eKB although visually there is hardly any difference compared to 24H2.

Key new features in Windows 11 25H2: security, AI, and cleanup

Windows 11 25H2 focuses on two very specific areas: Advanced security and AI integration, along with the removal of legacy components that pose a potential risk or that have become obsolete in practice.

Under the initiative Microsoft Secure Future Initiative25H2 incorporates improvements in vulnerability detection at both compile time and runtimeMore secure AI-powered development tools and stricter adherence to the Secure Development Lifecycle (SDL) are being implemented. The goal is to better protect the system against current and future threats.

In parallel, the update removes old elements such as PowerShell 2.0 and the WMIC command lineThese applications, which for years have been essential, now represent more risk than benefit. Other legacy applications and components are also disappearing, while Notepad and modern tools fill the gap left by utilities like WordPad.

On the positive side for the user, 25H2 enables compatibility with Wi-Fi 7 for compatible devicesIt offers IT administrators more control over pre-installed applications through policies (Group Policy/MDM, Intune) and, for example, Configure AppLocker with custom rules to improve security, and enhance AI features in built-in apps like Photos or Paint, including intelligent image categorization, generative erasing, and creative features.

Many of these improvements were already present, but disabled, in 24H2 builds. The enablement package makes them available by default on eligible systems, provided the hardware meets the necessary requirements (especially regarding...). Copilot+ NPUs and PCs for the most advanced AI features).

Performance, stability and internal changes in 25H2

Although 25H2 does not introduce a desktop redesign or radical interface changes, it does incorporate performance optimizations and internal adjustments that affect the daily experience, especially on modern equipment.

Among the changes detailed in different builds and update bulletins are: improvements in RAM usage in multitasking (reductions of 10-15% in certain scenarios), optimizations for recent CPUs and NPUs, and a more aggressive energy saving mode which applies to both laptops and desktop PCs.

File Explorer also benefits from these changes, integrating native support for compression formats like 7z and TAR in addition to ZIPand refining the Home section with clearer access to recent files and favorites. All of this is based on the same foundation as 24H2, so the 25H2 eKB simply enables a set of already proven features.

In terms of stability, Microsoft has been correcting problems through patches such as KB5050009, KB5062660 or KB5065426These patches address issues affecting User Account Control (UAC) in MSI installers, parental consent problems, and adjustments to SMB auditing, among others. They are integrated into the shared 24H2/25H2 branch, so subsequent maintenance is common to both branches.

Known issues and limitations in Windows 11 25H2

Despite arriving as a light update, Windows 11 25H2 is not free of certain issues acknowledged by Microsoft, many of which also occur in 24H2 by sharing the same codebase.

One of the problems pointed out is that Certain DRM-protected content may not play correctly because the Enhanced Video Renderer engine, a legacy technology, no longer works. This doesn't affect modern services like Netflix, but it can impact playback of Blu-ray or protected DVDswhere some users are encountering a black screen.

It has also been documented that the standalone Windows Update installer, WUSA does not allow the installation of .msu updates in some scenarios. directly, something that affects businesses and administrators more than home users. Added to this is the inability to share files using SMBv1 in 25H2, since Microsoft is pushing to use SMBv2 or SMBv3 and does not offer support for continuing to use the old version.

Finally, it has been indicated that The Media Creation Tool is not available for ARM64 PCs In this phase, although it can be used to generate ISO images intended for x64 systems. On ARM systems, the recommended method is through specific ISOs or mechanisms provided through Windows Update itself.

Prerequisites and upgrade paths for using an eKB

To be able to apply an enablement package, it is essential to meet a basic requirement: already be on the base version that shares a core with the new oneYou cannot upgrade from a much older edition using only the enablement package.

In practice, this means that to install the eKB Windows 11 25H2, you should already be on 24H2Similarly, in Windows 10 you could only use the 20H2 eKB if you were upgrading from 2004. If you are on Windows 10 1909, Windows 11 22H2, or similar, the process involves first performing a full feature update (using ISO, Installation Wizard or Windows Update) until you reach the appropriate base version.

Once on the correct branch, the enablement package is distributed through several channels: Windows Update and Microsoft Update for standard home and professional usersWSUS and MDM tools (such as Intune) in enterprise environments, and integrated into many official ISOs for clean installations.

In all cases, after applying the eKB It is mandatory to restart the computerIt is during this restart that the system activates the new features, changes the version number, and finishes adjusting the environment. The downtime, however, is significantly shorter than that of a typical feature update.

"Unsupported" enablement packages and update paths

Things get complicated when you try to use enablement packages outside of the scenarios envisioned by MicrosoftGuides are circulating online for activating, for example, versions like 22H2 in Windows 10 Enterprise LTSC editions or IoT Enterprise 21H2 using packages designed for standard channels.

By doing so, the system may appear as Windows 10 22H2, a version that is already at end of support (EOL)In that case, Windows Update stops delivering automatic patches because it "believes" the system is on an unsupported edition, even though you are actually using an LTSC base that still receives updates.

Some users have found that they can be installed manually Latest updates for Windows 10 Enterprise/IoT Enterprise LTSC 21H2 from the Microsoft Update Catalog (for example, by searching for “21h2 ltsb x64” and applying the latest patches). These updates are listed correctly on the Windows Update page within Settings.

The reasonable question that arises is whether those 21H2 updates They successfully patch a system identified as 22H2especially regarding components that have changed significantly between builds. The theoretical risk is ending up with a “hybrid system” 21H2/22H2In this scenario, part of the system is protected while another part relies on outdated patches. Therefore, although these approaches are possible, they are not recommended for environments where security is critical.

Availability of ISOs and images for Windows 11 25H2

Although the enablement package is intended for users who are already on 24H2Microsoft also offers full ISOs of Windows 11 25H2 for clean installations or in-place upgrades from previous versions.

There are official images for x64 and ARM64 architectureswith extensive filenames that specify the build, edition (CLIENT_CONSUMER), architecture, and language. For example, an English x64 client ISO includes strings like “CLIENT_CONSUMER_x64FRE_en-us.iso”, while the ARM64 equivalent is identified as “CLIENT_CONSUMER_A64FRE_en-us.iso”.

Each ISO comes with integrity values such as CRC32, CRC64, SHA1, SHA256, SHA384, SHA512, BLAKE2sp, MD5, or XXH64, which allow you to verify that the download is not corrupted or tampered with. This is especially useful if you download the image from untrusted networks or if you want to ensure that it exactly matches the one published by Microsoft.

If you need the ISO in another language, you can adjust the regional code within the link itself, replacing the “en-us” for the desired language (for example, “ja-JP” for Japanese). This is how localized images are obtained, maintaining the same build and internal characteristics.

How to download the Windows 11 25H2 ISO using MediaCreationTool?

In addition to direct downloads, many users prefer to use Microsoft's official tool known as Media Creation Tool to generate installation ISOs or USB drives.

The typical process involves downloading the application from the Microsoft website, run it and accept the license termsNext, you choose the option “Create a USB drive or download the ISO,” which lets you decide whether you want an ISO file to mount or burn later, or to directly prepare a bootable installation USB.

During the wizard, you select the language, edition (Home, Pro, etc.) and architecture (In the case of Windows 11, this is usually x64, although it may offer more than one option). If you choose to download an ISO file, the program will ask you where to save it and will begin the download. Once complete, You can use tools like Rufus to create an installation USB drive or burn the ISO to a DVD if you still work with that format.

It is important to note that, as Microsoft has acknowledged, MediaCreationTool is not ready for ARM64 PCs in the context of 25H2, so in that architecture it is advisable to use specific ISOs or alternative mechanisms.

Requirements, compatibility, and best practices before upgrading

For any major Windows update, and especially when they involve enablement packages or complete ISOsIt's advisable to prepare the ground to avoid surprises.

In the case of Windows 11 25H2, the hardware requirements are the same as for 24H2 and for Windows 11 in general: 64-bit CPU with at least 2 cores and 1 GHz, 4 GB of RAM, 64 GB of storage, TPM 2.0, Secure Boot, and DirectX 12 compatible graphicsIf your system already runs 24H2 without issues, it should be able to receive 25H2 via eKB.

Before updating, it is highly recommended to do a backup your data (whether with OneDrive, an external drive, or a backup solution of your choice) and review critical drivers such as those for audio, graphics, or storage controllersMany compatibility blocks applied by Microsoft are due precisely to problematic drivers, so it's advisable to have the latest versions from the manufacturer.

Last News

If you want to get ahead of the general launch, you can join the Windows Insider Release Preview channel To test 25H2 before it's released to everyone, always be sure to do so on a test machine or with a recent backup. And if you're coming from an older version (Windows 10 or early builds of Windows 11), consider upgrading to 24H2 first with a full ISO and then letting the eKB file do its work to upgrade to 25H2.

Custom thermal profiles on laptops with Windows 11
Related article:
Tutorial for creating custom thermal profiles on laptops with Windows 11

Understanding what an Enablement Package is in Windows and how it applies in concrete examples such as Windows 10 20H2 or Windows 11 25H2 It helps to take the pressure off the issue of updates. Behind a small patch that takes barely five minutes to install lies a whole version change, a new support cycle, and a series of security and performance improvements that keep your computer up to date without turning each update into an ordeal. Share this information so more users can learn about Enablement Packages in Windows.