Support of Windows 11 and Windows Server 2022 in Kaspersky Endpoint Security

Support

General

General articles

Support of Windows 11 and Windows Server 2022 in Kaspersky Endpoint Security

Latest update: May 2, 2024 ID: 15778

For information about the support of Windows 10, Windows Server 2016 and 2019, see this article.

Kaspersky Endpoint Security for Windows supports the following editions of Windows 11 and Windows 2022:

Windows 11 Pro/Enterprise	Kaspersky Endpoint Security
Windows 11 Pro/Enterprise	10 SP2 MR4 (10.3.3.304), 10 SP2 MR3 (10.3.3.275), 10 SP2 MR2 (10.3.0.6294), 10 SP2, 10 SP2 MR1 (10.3.0.6294)	11.0.0.6499, 11.0.1.90	12.5.0.539, 12.4.0.467, 12.3.0.493, 12.2.0.462, 12.1.0.506, 12.0.0.465, 11.11.0.452, 11.10.0.399, 11.9.0.351, 11.8.0.384, 11.7.0.669, 11.6.0.394, 11.5.0.590, 11.4.0.233, 11.3.0.773, 11.2.0.2254 и CF 1, 11.1.1.126, 11.1.0.15919
Windows 11 2023 Update (23H2)			limitations
_{Windows 11 2022 Update (22H2)}			limitations
Windows 11			limitations
Windows Server
Version 2022			limitations

Support of Windows 11 2023 Update (23H2)

Kaspersky Endpoint Security 12.5.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.5.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- Webcam management through Device Control.
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the OS upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the OS upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2, the application automatically starts the restoration procedure, as a result of which the local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Code injection
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Access to audio devices
- Access to video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2, the application automatically starts the restoration procedure, as a result of which the local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 11 2022 Update (22H2)

Kaspersky Endpoint Security 12.5.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.5.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- Webcam management through Device Control.
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the OS upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the OS upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2, the application automatically starts the restoration procedure, as a result of which the local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Code injection
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Access to audio devices
- Access to video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2, the application automatically starts the restoration procedure, as a result of which the local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows 11

Kaspersky Endpoint Security 12.5.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.5.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- Webcam management through Device Control.
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the OS upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the OS upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2, the application automatically starts the restoration procedure, as a result of which the local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

To control the Wi-Fi connection, you must enable location services in the operating system settings: Settings → Privacy → Location.
Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
The ReFS file system is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
Webcams are not supported in Device Control.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Code injection
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Access to audio devices
- Access to video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to the latest version or contact Technical Support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2, the application automatically starts the restoration procedure, as a result of which the local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Support of Windows Server 2022

Kaspersky Endpoint Security 12.5.0, 12.4.0, 12.3.0, 12.2.0, 12.1.0, 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0

Limitations:

The ReFS file system is supported with limitations.
The Server Nano configuration is not supported.
Firewall / Application Control: file paths in rules are not case-sensitive.
When the application is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the application is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security 11.7.0, 11.6.0, 11.5.0, 11.4.0, 11.3.0, 11.2.0 and Critical Fix 1

Limitations:

The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
Firewall / Application Control: file paths in rules are not case-sensitive.
When the application is installed, Windows Defender is removed (according to Microsoft recommendations for Anti-Malware Product).
When the application is installed from the MSI file (without using setup.exe), you must remove Windows Defender before starting the installation. For details, see the Microsoft support site.

Kaspersky Endpoint Security11.1.1, 11.1.0

Limitations:

The ReFS file system is supported with limitations.
The Server Core, Server Nano, and Cluster Mode configurations are not supported.
Firewall / Application Control: file paths in rules are not case-sensitive.
Before installing the application on Microsoft Windows Server 2022, you must remove Windows Defender. For details, see the Microsoft support site.

Useful references

Support of Windows 10, Windows Server 2016 and Windows Server 2019 in Kaspersky Endpoint Security

The newest Kaspersky solutions. More than just an anti‑virus.

Complete security in the digital world for you & your family. Choose your perfect solution for any device.

Kaspersky Safe Kids. Watch over your children, even when you’re not around.

GPS tracking, parent control of the mobile and social networks for your children’s security. There’s one license for all devices.

Did you find this article helpful?

What can we do better?

Thank you for your feedback! You're helping us improve.