Gaming
Experience epic and immersive graphics.
A halo of protection
Advanced protections to defend against today’s cyberthreats. Built-in, routinely updated, and at no extra cost to you.2 That’s Windows Security.
Device encryption
If you turn on device encryption, only authorized individuals will be able to access your device and data.4
Find my device
Keep track of your devices—even your digital pen!
Firewall and network protection
Your Windows device comes with built-in security features to help safeguard against viruses, malware, and ransomware.
Internet protection
App & Browser control in Windows Security helps protect your device from potentially dangerous apps, files, websites, and downloads.
Parental controls and protection
Manage screen time, limit access to mature content, and control online purchases when you connect your family's Microsoft accounts.
Secure boot
Helps prevent malicious software applications and unauthorized operating systems from loading during the system start-up process.
Windows Hello
Uses facial recognition, fingerprint, or PIN, for a fast, secure, and password-free way to unlock your compatible Windows devices.3,5
Windows Security
View and manage the security and health of your device.
Pro Features:
BitLocker device encryption
If your device is lost or stolen, BitLocker puts everything on lockdown, so no one else can access your systems or data.3
Windows Information Protection (WIP)
Helps protect enterprise apps and data against accidental data leaks on enterprise-owned devices and personal devices that employees bring to work.6
Assigned Access
Windows 11 Pro devices run different applications depending on the user and keep individual identities separate and secured.
Dynamic Provisioning
Take a new PC out of the box, turn it on, and transform it into a productive organization device, with minimal time and effort.
Enterprise State
Roaming with Azure Available to any organization with an Azure AD Premium or Enterprise Mobility + Security (EMS) license, Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device.7
Group Policy
Manage PCs, user accounts, and groups, and get easy access to files and printers when you pair Windows 11 Pro with Windows Server.*
Kiosk mode setup
Configure a device locally on the device or remotely using Mobile Device Management.
Microsoft Store for Business
Your one place to find, manage, and distribute apps to Windows 11 devices in volume.8
Mobile Device Management
Mobile Device Management (MDM) provides an alternative to traditional PC management processes so you can transition to cloud-based management at your own pace.9
Support for Active Directory
Domain Join + Group Policy: IT staff can easily manage PCs, user accounts and groups, security policies, and can get easy access to files and printers when pairing Windows 11 Pro with Windows Server.*
Support for Azure
Active Directory Employees can use a single login across Windows 11, Microsoft 365**, and other Microsoft services, making logons and passwords easier to manage.
Windows Update for Business
Helps reduce management costs, provides control over update deployments, enables efficient delivery of updates, and provides access to the latest innovations.
Features and app availability may vary by region.
1 Certain features require specific hardware, see here for full details. Some layouts only available based on display resolution and scale settings. Chatting via SMS is available in limited countries and will be made available to other locations on a rolling basis. Please refer to this page for more details. Internet access required; ISP fees may apply. Feature only available in Windows 11.
2 During the device support period provided by the Original Equipment Manufacturer (OEM).
3 Requires TPM 2.0 or greater for TPM based key protection.
4 Requires InstantGo/AOAC/HSTI-compliant. More details here.
5 Requires specialized hardware, including fingerprint reader, illuminated IR sensor or other biometric sensors and capable devices.
6 For Windows 11 Pro: WIP requires either Mobile Device Management (MDM) or System Center Configuration Manager to manage settings.
7 Separate subscription for Azure Active Directory Premium required.
8 Available in select markets. Functionality and apps may vary by market and device.
9 MDM requires an MDM product such as Microsoft Intune or other third-party solutions (sold separately).
10 Certain features require specific hardware, see here for full details. Some layouts only available based on display resolution and scale settings. Chatting via SMS is available in limited countries and will be made available to other locations on a rolling basis. Please refer to this page for more details Internet access required, ISP fees may apply.
11 Apps that are no longer open will not automatically be put back into place. Apps that come out of full-screen mode when you undock will not be put back into full-screen mode upon redocking but will be placed back as best as possible.
12 Hardware and software dependent, requires NVMe SSD with minimum 2.5GB/second read times, DirectStorage API adoption for games.
13 The new emoji style is only available in Windows 11 and is 2D. We still offer an assortment of emojis for Windows 10 customers.
14 Ability to run x64 applications on Windows on ARM is only available with Windows 11.
+ Some apps shown coming later. Certain apps only available through Microsoft Store app in Windows 11.
*Sold separately.
** Microsoft 365 subscription sold separately.