Device Operating System Specification
- Windows – Desktops (on-premise)
- Windows - Laptops
- macOS - Apple
- All corporate Windows systems need to be capable of running the latest currently available version of Microsoft Windows Operating System deployed to that device.
- Microsoft are retiring support and security patches for Windows 10 22H2 (the final version) from 12.10.2025.
- Microsoft release major OS versions every six months and patches to those releases on an ongoing basis. The currently adopted baseline version for legacy devices (non Windows 11 compliant) is Windows 10 Enterprise release 22H2 which will extend to its end-of-life point (October 2025).
- Laptop devices must be supplied with a Windows 10 Professional license as a minimum required for Intune/Autopilot integration.
- OS Updates and patches are remotely delivered to Desktops and Laptops by the relevant management platform /technology /service (AD/SCCM for on-premise desktops, Intune for Laptops and Jamf Cloud for Apple macOS devices).
- Devices currently running Windows 10 which can support Windows 11 will be updated to that version using the available SCCM and Intune technologies ahead of October 2025.
- The centrally managed student (SITL) fleet now operates under the Windows 11 environment. Migration of any remaining “faculty” SITL devices currently Windows 10 to Windows 11 (which may involve a hardware uplift component /expense) is required to complete by October 2024.
- Digital Services are incrementally deploying a Windows 11 environment to staff desktops and laptops, either by way of a fresh build or remotely scheduled OS updates to all qualifying /capable devices.
- To meet cyber-security and governance needs, all Staff and Student devices that cannot support Windows 11 must be retired from service before October 2025.
- Newly procured devices must be via the NDNA procurement framework.
- Microsoft are retiring support and security patches for Windows 10 22H2 (the final version) from 12.10.2025. Windows 11 will not be supported on any device which is 7th generation Intel or lower and does not support TPM 2.x (devices currently 5+ years old).
- Stakeholders are advised to plan for Windows 11 implementation and align their hardware fleet to meet this need by way of planned hardware refreshes /lifecycle management.
- Apple annually update their operating system releases (to version N) and maintain support for the two preceding major version releases (N-2). macOS versions older than N-2 are unsupported by Apple and the University’s Apple Management Platform (Jamf Cloud).
- All corporate Apple devices need to be running the currently supported and most recently approved version of macOS. This will ideally be the latest version of macOS that the device can support.
- Apple hardware that cannot run macOS version 13 or higher presents a cyber security risk and must be retired from service (and offboarded as per governance requirements).
- Apple hardware that is capable of running a higher version, must be updated to the optimum macOS version for that hardware model.
- Stakeholders are advised to plan for all of the above components and align their hardware fleet to meet this cybersecurity need by way of planned hardware refreshes /lifecycle management.
< Return to Workstation Standards Architecture