• Feature Home Pro Pro for Workstations
    Application Control

    Powered by Intelligent Security Graph.

    Yes Yes Yes
    Automatic encryption on capable devices Yes Yes Yes
    Biometrics

    Windows 11 powers the advanced biometric features of modern devices, such as fingerprint scanners and special IR cameras for face recognition.

    Yes Yes Yes
    Device encryption

    Device encryption is available on a wide range of Windows devices and helps protect your data by encrypting it. If you turn on device encryption, only authorised individuals will be able to access your device and data.

    Yes Yes Yes
    Find my device

    Keep track of your devices—even your digital pen!

    Yes Yes Yes
    Firewall and network protection

    Your Windows device comes with comprehensive, built-in security features, including firewall and internet protections to help safeguard against viruses, malware and ransomware.

    Yes Yes Yes
    Internet protection

    App & browser control in Windows Security provides the settings for Microsoft Defender SmartScreen, which helps protect your device from potentially dangerous apps, files, websites and downloads.

    Yes Yes Yes
    Enhanced phishing protection with Microsoft Defender SmartScreen

    Helps protect people from phishing attacks by alerting them as they are entering their Microsoft credentials into a malicious application or website.

    Yes Yes Yes
    Windows presence sensing

    Presence sensing combines Windows Hello with presence detection sensors to sign you in when you approach and lock when you leave.

    Yes Yes Yes
    Multifactor Authentication

    Windows 11 offers simple, secure multifactor authentication via phone call, text, or the Microsoft Authenticator app for mobile phones and tablets.

    Yes Yes Yes
    Parental controls/protection

    Manage screen time, limit access to mature content, control online purchases when you connect your family's Microsoft accounts, and check to make sure the family’s devices are secure and up to date.

    Yes Yes Yes
    Protection from fileless based attacks Yes Yes Yes
    Secure Boot

    Helps prevent malicious software applications and unauthorised operating systems from loading during the system start-up process.

    Yes Yes Yes
    Security by default

    All new Windows 11 devices will come with powerful built-in security including hardware isolation, encryption and malware protection.

    Yes Yes Yes
    Smart App Control

    Give employees flexibility to choose their own apps while maintaining strong security. Smart App Control blocks untrusted or unsigned software to prevent malicious apps from running. Available on new devices shipped with Windows 11 2022 Update. Devices with previous versions of Windows 11 can use this feature with a reset and clean installation of Windows 11 2022 Update. Organisations using a modern device management (MDM) solution such as Microsoft Intune can use that tool instead to manage apps and devices.

    Yes Yes Yes
    Windows Defender Antivirus

    Windows 11 includes built-in malware protection to help keep you safe from viruses, spyware and other malicious software.

    Yes Yes Yes
    Windows Defender System Guard

    Windows Defender System Guard uses hardware-based root of trust on modern devices to block start-up attacks and prevent them from propagating.

    Yes Yes Yes
    Windows Hello

    Using facial recognition, a fingerprint or PIN, Windows Hello is a fast, secure and password-free way to unlock your compatible Windows devices.

    Yes Yes Yes
    Windows Security

    View and manage the security and health of your device.

    Yes Yes Yes
    Bitlocker device encryption

    If your device is lost or stolen, BitLocker and BitLocker To Go put everything on lockdown, so no one else can access your systems or data.

    No Yes Yes
    Integrated with Microsoft Information Protection

    Protect your information from accidental or intentional data leaks.

    No Yes Yes
    Remote Deployment and Compliance

    Deploy, secure and manage remote PCs through the cloud, in compliance with your company’s policies.

    No Yes Yes
    Windows Hello for Business

    Windows Hello capabilities plus passwordless sign-in to Windows and Azure.

    No Yes Yes
    Windows Information Protection (WIP)

    WIP helps to protect against potential data leakage without otherwise interfering with the employee experience. WIP also helps to protect enterprise apps and data against accidental data leaks on enterprise-owned devices and personal devices that employees bring to work, without requiring changes to your environment or other apps.

    No Yes Yes
    Resilient File System (ReFS)

    Detects when data becomes corrupt on one of the mirrored drives and uses a healthy copy of your data on other drives to correct and protect data.

    No Yes Yes
    Feature Home Pro Pro for Workstations
    Delivery Optimisation

    Enables peer-to-peer transfer of updates.

    Yes Yes Yes
    Express Updates

    Ease the network impact of monthly quality updates.

    Yes Yes Yes
    Assigned Access

    With Assigned Access, Windows 11 Pro devices run different applications depending on the user and keep individual identities separate and secured.

    No Yes Yes
    Azure Active Directory Join

    Suitable for both cloud-only and hybrid organisations.

    No Yes Yes
    Hybrid Azure Active Directory Join

    Allows on-premises Active Directory enrolled devices to be joined to Azure Active Directory

    No Yes Yes
    Cloud managed updates

    Approve, schedule and monitor any Windows Update content through the cloud, including security updates, drivers and firmware.

    No Yes Yes
    Enterprise State Roaming with Azure

    Available to any organisation with an Azure AD Premium or Enterprise Mobility + Security (EMS) licence, Enterprise State Roaming provides users with a unified experience across their Windows devices and reduces the time needed for configuring a new device.

    No Yes Yes
    eSIM Enterprise Solutions

    eSIMS10 are embedded SIM cards that let you connect your PC to cellular networks when you don’t have access to WI-FI or when available networks are unsecured.

    No Yes Yes
    Group Policy

    Manage PCs, user accounts and groups, and get easy access to files and printers when you pair Windows 11 Pro with Windows Server. You can even define specific security and networking policies for your users and devices.

    No Yes Yes
    Kiosk mode set-up

    Configure a device in kiosk mode in a very simple way. You can do this locally on the device or remotely using Mobile Device Management.

    No Yes Yes
    Mobile application management

    Employees can use their personal devices to access work apps and content without IT help.

    No Yes Yes
    Mobile device management

    Windows 11 mobile device management (MDM) provides an alternative to traditional PC management processes: you can transition to cloud-based management at your own pace.

    No Yes Yes
    Organisational messages

    IT admins can send templated organisational messages to specific devices or users with their company logo using Microsoft Endpoint Manager.

    No Yes Yes
    Remote help

    Remote help enables IT to provide secure, real-time support through the cloud.

    No Yes Yes
    Seamless local and virtual apps

    Virtual apps will behave like local apps with Windows 11 and Azure Virtual Desktop (AVD).

    No Yes Yes
    Support for Active Directory

    Domain Join + Group Policy: IT staff can easily manage PCs, user accounts and groups, security policies, and get easy access to files and printers when you pair Windows 11 Pro with Windows Server. You can even define specific security and networking policies for your users and devices.

    No Yes Yes
    Support for Azure Active Directory

    Employees can use a single login across Windows 11, Microsoft 365, and other Microsoft services, making log-ons and passwords easier to manage. The shared logon works on PCs, tablets and phones with minimal IT involvement.

    No Yes Yes
    Windows Autopilot

    New devices can easily be set up following a cloud powered pre-configured process.

    No Yes Yes
    Windows Server Update Service (WSUS)

    Enables IT admins to deploy the latest Microsoft product updates.

    No Yes Yes
    Windows Update for Business

    Windows Update for Business can help businesses reduce management costs, provide control over update deployments, enable more efficient delivery of updates, and provide access to the latest innovations from Microsoft.

    No Yes Yes
    Feature Home Pro Pro for Workstations
    Accessibility

    Windows 11 supports users with diverse accessibility needs and workstyle preferences.

    Yes Yes Yes
    Clipchamp

    Clipchamp is a video editing tool with customisable templates and text-to-speech features that simplify sharing across social media.

    Yes Yes Yes
    Cloud Clipboard

    Cloud Clipboard lets you copy multiple items to paste when you need them.

    Yes Yes Yes
    Contextual recommendations

    SGet contextual recommendations for more efficient workflows across Windows. Spend less time scrolling and speed everyday tasks with suggestions for files, contacts and actions.

    Yes Yes Yes
    Custom desktops

    Create a separate desktop for each project or work stream and switch instantly between desktops from your taskbar.

    Yes Yes Yes
    Faster boot time

    Windows 11 devices ship with Windows fast start-up enabled.

    Yes Yes Yes
    Fluid tablet experience

    Seamlessly use your device as a tablet, with improved multi-finger touch, smooth rotation, and touch and pen available to capture thoughts for every text input.

    Yes Yes Yes
    Focus

    Focus tools to help you work with fewer distractions. Easily disable notifications when you want to stay focused.

    Yes Yes Yes
    Focus on meetings

    Meet online with confidence, keeping the background in the background with intelligent noise cancelling and blur.

    Yes Yes Yes
    Microsoft 365 apps on Windows

    Gives individuals and teams the breadth of tools they need to do what matters - faster.

    Yes Yes Yes
    Microsoft Edge

    A fresh approach to the browser, giving you world-class compatibility and performance, control and security from Microsoft, and productivity tools for the web

    Yes Yes Yes
    Microsoft Power Automate

    Easily automate workflows across applications with a low-code, guided process and hundreds of pre-built connectors.

    Yes Yes Yes
    Microsoft search in Windows 11

    Fast, comprehensive, local and cloud search, right in the taskbar

    Yes Yes Yes
    Microsoft Whiteboard

    A free-form digital canvas where people, ideas and content can come together.

    Yes Yes Yes
    Multi-tasking

    Multiple core processors including dual-core, quad-core processors, and 6-core processors enable stable, fast multi-tasking across several programs and applications.

    Yes Yes Yes
    OneDrive & OneDrive for Business

    OneDrive syncs your files securely to the cloud, so you can access them from any device. OneDrive for Business takes secure sync and collaboration to the next level through seamless synchronisation with SharePoint and Teams.

    Yes Yes Yes
    Personalised File Explorer with tabs

    Personalised File Explorer with an optimised home page where you can see the latest file activity, mark favourite files, and use tabs to keep your files organised and separate. Available

    Yes Yes Yes
    Photo Manager

    Photo Manager brings together images from local, cloud and mobile sources in a single gallery backed up by OneDrive.

    Yes Yes Yes
    Work across devices

    Windows 11 apps designed for mobile devices help users move freely between their phone and PC

    Yes Yes Yes
    Remote desktop

    Remote desktop lets you unlock and access your files, folders and apps just the way you left them—anywhere and from virtually any device.

    No Yes Yes
    Persistent memory

    Provides the most demanding apps and data with the performance they require with non-volatile memory modules (NVDIMM-N) hardware.

    No No Yes
    SMB Direct

    Supports the use of network adapters with RDMA to function at full speed with very low latency, while using very little CPU for faster file sharing.

    No No Yes