Support of Windows 11 and Windows Server 2022 in Kaspersky Endpoint Security

Latest update: January 30, 2023 ID: 15778

For information about the support of Windows 10, Windows Server 2016 and 2019, see this article.

Kaspersky Endpoint Security for Windows supports the following editions of Windows 11 and Windows 2022:

Windows 11 Pro/Enterprise	Kaspersky Endpoint Security
Windows 11 Pro/Enterprise	10 SP2 MR4 (10.3.3.304), 10 SP2 MR3 (10.3.3.275), 10 SP2 MR2 (10.3.0.6294), 10 SP2, 10 SP2 MR1 (10.3.0.6294)	11.0.0.6499, 11.0.1.90	12.0.0.465, 11.11.0.452, 11.10.0.399, 11.9.0.351, 11.8.0.384, 11.7.0.669, 11.6.0.394, 11.5.0.590, 11.4.0.233, 11.3.0.773, 11.2.0.2254 and CF 1, 11.1.1.126, 11.1.0.15919
Windows 11 2022 Update (22H2)			limitations
Windows 11			limitations
Windows Server
Version 2022			limitations

Support of Windows 11 2022 Update (22H2)

Kaspersky Endpoint Security 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE and WSL 2.0 are not supported.
ReFS is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
Not supported:
- The installation and running of Kaspersky Endpoint Security for Windows in a Windows Sandbox environment.
- The Taking screenshots privilege in the Host Intrusion Prevention component (Application Control Rules → Rights) for 64-bit operating systems.
- BypassIO and Kernel Handset Profile (HSP).

Limitations of updating the operating system on computers with KES 12.0.0, 11.11.0, 11.10.0, 11.9.0, 11.8.0, 11.7.0, 11.6.0, 11.5.0, 11.4.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.3.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
ReFS is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.3.0 installed:

If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.2.0 and Critical Fix 1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
ReFS is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.2.0 and 11.2.0 Critical Fix 1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to version 11.5.0 or later or contact technical support for a private patch.
If the computer has been encrypted using Full Disk Encryption (FDE), and the upgrade is not performed via WSUS, follow the instructions in this article.

Kaspersky Endpoint Security 11.1.1

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
ReFS is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.

Limitations of updating the operating system on computers with KES 11.1.1 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to version 11.5.0 or later or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.

Kaspersky Endpoint Security 11.1.0

Limitations:

Windows Subsystem for Linux (WSL) is supported with limitations: Pico processes in FLE are not supported.
ReFS is supported with limitations.
Case-sensitive file paths are supported with limitations:
- Case-sensitive FLE paths are not supported.
- HIPS / Firewall / Application Control. File paths in rules are not case-sensitive.
The installation and running of Kaspersky Endpoint Security in a Windows Sandbox environment is not supported.
The following privileges in the Host Intrusion Prevention component are not supported (Application Control Rules → Rights).
For 32-bit operating systems:
- Pausing other processes and threads
- Code injection
For 32-bit and 64-bit operating systems:
- Using other applications’ APIs
- Installing hooks
- Creating a service
- Opening the service for reading
- Modifying the service configuration
- Access to audio devices
- Access to video devices
- Using the browser command line

Limitations of updating the operating system on computers with KES 11.1.0 installed:

If the File Encryption component (FLE) is installed on the computer, the operating system update is not supported. Upgrade Kaspersky Endpoint Security to version 11.5.0 or later or contact technical support for a private patch.
After upgrading the operating system from a version earlier than Windows 10 Redstone 2 the application automatically starts the restoration procedure, as a result of which local settings are reset to their default values. At the first startup after the reset, the application prompts to participate in KSN.
If the computer has been encrypted using Full Disk Encryption (FDE), follow the instructions in this article.