Windows 11 24H2: 7 Features SMBs Should Turn On Right Now

Overview

The latest Windows 11 update brings performance and security improvements that matter to small businesses. Here are seven settings to enable after upgrading.

1) Passkeys and enhanced sign-in

• Use passkeys instead of passwords wherever supported
• Enforce Windows Hello for Business for phishing-resistant login

2) Automatic VPN and Wi‑Fi security

• Configure auto-connect for corporate VPN on untrusted networks
• Block connections to open networks without encryption

3) Core isolation and Memory integrity

• Turn on kernel-level protections to stop many driver-based attacks

4) Smart App Control

• Only allow trusted apps to run, reducing malware risk on new devices

5) SMB signing and encryption defaults

• Ensure file shares require signing to prevent tampering on the network

6) Snipping Tool redaction

• Use built-in redaction to safely share screenshots without leaking data

7) Energy and performance tweaks

• Enable efficiency mode for background apps on laptops

Rollout checklist

• [ ]  Verify device compatibility in Intune
• [ ]  Pilot with 10% of devices
• [ ]  Apply baseline security policies
• [ ]  Communicate user‑visible changes and tips

What Clyk can do

• Assess upgrade readiness and schedule rollout
• Apply security baselines via Intune
• Train staff on new features in a 30‑minute session

Planning an upgrade? We’ll handle the testing and rollout for you.