Query Details
**Detect Windows Versions reaching end of service on October&November 2025** This query helps you quickly see the number of affected devices or get a detailed list of machines still running versions that are approaching end of support: Windows 10 & 11 version 22H2 → end of support on October 14, 2025 Windows 11 version 23H2 (Home & Pro) → end of support on November 11, 2025 ``` DeviceInfo | where Timestamp > ago(1d) | extend OSaffected = strcat(OSDistribution, " ", OSVersionInfo) // filter by the affected OS distributions | where OSaffected has "22H2" or OSaffected has "23h2" | extend Windows10_22H2 = iff(OSaffected has "Windows10 22h2", "🚨 October 14,2025","") | extend Windows11_22H2 = iff(OSaffected has "Windows11 22h2", "🚨 October 14,2025","") | extend Windows11_23H2 = iff( OSaffected has "Windows11 23h2" and OSBuild == 22631,"November 11,2025 (⚠️ If are Home or Pro versions,if not 2026-11-10)","") | summarize Total_Devices= dcount(DeviceId) by OSPlatform,OSaffected, Windows10_22H2,Windows11_22H2,Windows11_23H2 //| summarize by DeviceName, DeviceId, OSaffected, Windows10_22H2,Windows11_22H2,Windows11_23H2 | order by OSaffected ```
This query is designed to identify and summarize devices running specific versions of Windows that are nearing their end of support in October and November 2025. Here's a simplified breakdown of what the query does:
Data Source: It starts by accessing the DeviceInfo table, which contains information about devices and their operating systems.
Recent Data: It filters the data to include only records from the last day (Timestamp > ago(1d)).
Identify Affected OS Versions: It creates a new field OSaffected that combines the operating system distribution and version information. It then filters for devices running Windows versions "22H2" or "23H2", which are the versions approaching end of support.
End of Support Dates:
Summarization: The query summarizes the data by counting the number of distinct devices (Total_Devices) for each combination of operating system platform and affected version, along with their respective end of support dates.
Ordering: Finally, it orders the results by the affected operating system version (OSaffected).
This query helps organizations quickly identify and quantify devices that need attention due to upcoming end-of-support deadlines, allowing them to plan for necessary upgrades or replacements.

Sergio Albea
Released: September 17, 2025
Tables
Keywords
Operators