Windows 11 IoT: What it is and how to install it

Windows 11 IoT Enterprise is the edition of the system designed for dedicated and fixed-purpose computers., such as point-of-sale terminals, ATMs, kiosks, medical equipment, manufacturing, and retail, where stability, control, and enterprise-grade security are paramount. If you're wondering what it offers compared to a "desktop" Windows, the key lies in full compatibility with the Windows ecosystem, but with specific capabilities to lock down the user experience and manage the device as an appliance.

In this guide I explain what Windows 11 IoT Enterprise and its LTSC variant are, its lifecycle, availability and licensing, compatibility and security, and how to install it step by step. preparing a basic image that you can then customize. You'll also find recommended deployment and maintenance methods, as well as modern management tools to help you safely move into production.

What is Windows 11 IoT Enterprise and LTSC?

Windows 11 IoT Enterprise is the evolution of the Windows IoT edition based on the same foundation as Windows 10, so it inherits its mature compatibility with applications, drivers, and management tools. This means that many solutions you already used on Windows 10 IoT Enterprise work here without any process changes.

The Windows 11 IoT Enterprise Long-Term Servicing Channel (LTSC) edition is targeted at special-purpose, fixed-function devices that require long-term support., with an extended lifecycle (10 years) and no frequent feature changes. This approach is suitable for banking, fast food, healthcare, hospitality, manufacturing, transportation, and retail, where a device must consistently perform and remain secure.

Both variants are based on the same foundation as Windows Professional and Windows Enterprise., thus maintaining enterprise compatibility, security, and manageability. Building on this foundation, IoT adds options for “locking down” the experience (kiosk/assigned access, shell lockdown) and customizing the system's surface based on the scenario, whether public-facing or internal staff.

In terms of architecture, Windows 11 IoT Enterprise LTSC is available for x64 and ARM64, covering everything from traditional equipment to low-power designs or embedded integrations where ARM64 makes a lot of sense. This broadens the range of hardware certified for robust IoT deployments.

Versions, life cycle and requirements

Windows 11 IoT Enterprise, version 21H2 (build 22000), was the starting point in the Windows 11 IoT branch.Following the Modern Lifecycle Directive, this release was actively supported until October 08, 10, following its general availability on October 2024, 04.

Release and Support Summary (representative excerpt):

Version	Compilation	Availability	End of support
Windows 11 IoT Enterprise 21H2	22000	2021-10-04	2024-10-08

Similar to Windows 10 IoT Enterprise, Windows 11 IoT receives monthly quality updates., and feature updates are delivered on an annual basis. This cadence simplifies planning for scenarios where every change must be tightly controlled.

The minimum hardware requirements for Windows 11 IoT Enterprise are consistent with those for Windows 11, so it is advisable to validate CPU, RAM, storage and, if applicable, ARM64 support for your designs. Before upgrading an existing device, check the requirements and preparation to ensure a smooth transition.

If you are evaluating LTSC, remember that its goal is not to introduce new features every year, but to provide stability. and the ability to keep images locked with very few changes in There, something critical in regulated or mission-critical environments.

Availability, updates and licenses

Windows 11 IoT Enterprise is available to manufacturers through authorized Windows IoT resellers., with specific license agreements for fixed-use devices. If you're creating new devices, contact an authorized reseller for licensing advice and appropriate SKUs.

For eligible Windows 10 IoT Enterprise (20H2 or later) devices, the upgrade to Windows 11 21H2 was offered as an upgrade. starting October 5, 2021. On unmanaged computers, simply go to Settings > Update & security > Windows Update and check for updates; if your device is eligible, you can choose Download and Install and schedule a restart without interrupting your activity.

In managed environments, Windows 11 IoT Enterprise is managed through the usual channelsWindows Update for Business, Microsoft Endpoint Manager/Intune, or WSUS/Configuration Manager, just like Windows 10 IoT Enterprise. This way, you can maintain already tested flows and policies.

In licensing, the requirements for Windows 11 IoT Enterprise are equivalent to those for Windows 10 IoT Enterprise.This edition is offered as an annual release; consult with your IoT reseller to identify the most appropriate option based on your lifecycle needs (e.g., LTSC for scenarios with minimal changes).

Compatibility, apps, and Microsoft Edge

The promise of app compatibility remains: what works on Windows 10 generally works on Windows 11If you encounter issues, you can use programs like App Assure. Additionally, you can still package with MSIX, use Windows Package Manager (Winget) to install software, and deploy virtualized desktops and apps using Azure Virtual Desktop, including connecting MSIX apps.

On ARM64, applications compiled for x64 can be run via emulation using ARM64EC, which simplifies supporting traditional applications on ARM hardware without recompiling your entire software stack immediately.

Windows Bus Terminal It does not come as a core operating system component in Windows 11 IoT Enterprise.. In previous versions it was obtained from the Microsoft Store and, if you incorporate it, it will allow you to unify PowerShell, Symbol of the system and Azure Cloud Shell in tabs within a modern, configurable window.

Microsoft Edge is the included and default browserInternet Explorer is no longer available as a standalone app, but you can enable IE Mode within Edge for legacy sites (configurable at edge://settings/defaultBrowser). Edge incorporates sleep tabs to save resources and can be adjusted from the interface itself (edge://settings/system) or through Group Policy and MDM, with specific templates and policies for granular control.

As for controllers and accessories, most of those that work on Windows 10 IoT Enterprise are expected to also work on Windows 11 IoT.Always check with your manufacturer for specific details and take advantage of the fact that many security policies and settings are applied consistently across versions.

Implementation, administration and maintenance

The same deployment methods you used with Windows 10 IoT Enterprise apply to Windows 11 IoT Enterprise.You can install and capture images using the Microsoft Deployment Toolkit (MDT), use Configuration Manager, or deliver the update to eligible devices from Windows Update/WSUS, keeping your processes current.

Microsoft Intune acts as an MDM/MAM solution to manage devices and applications.With Intune, you can create policies that install apps, configure device features, enforce requirements (like PINs), assess risks, block compromised devices, and more. If you use Group Policy (GPO), you'll still be able to use it in Windows 11. Intune offers administrative templates and a comprehensive catalog of settings. GPO analysis helps you understand and migrate settings.

Windows Update and Delivery Optimization allow you to control the update cycle by reducing bandwidth consumption.Feature updates in Windows 11 are delivered annually, and quality updates arrive monthly. You can assign devices to servicing channels and decide how, when, and from where they're updated (Intune, GPO, WSUS, etc.). Delivery Optimization enables peer-to-peer content sharing and bandwidth throttling, with policies for upload/download caps and cache size.

For the end user, the installation and update experience is guided: from downloading the update and silent installation to notifications to schedule a restart at the right time, avoiding disruptions to business operations.

Labs and creating a basic image

Before customizing, it is a good idea to install a base image on a reference device to validate that everything works.That first step is the foundation for future customizations (shell, apps, lockdown, policies), so it's worth doing it carefully.

Create a bootable installation USB

The most common way to install Windows on an IoT device is using a USB flash drive. Boot with the installation filesBelow is a typical procedure using DiskPart on a technical computer:

1. Connect a USB flash drive to the technical equipment and make sure you know its size to identify it correctly.
2. Open a command prompt with administrator privileges and run DiskPart to manage the disk:

   diskpart

3. List the disks to locate the USB drive by size:

   list disk

   output example (in this example, Disk 1 matches the USB by its capacity):

   Disk ###  Status   Size   Free   Dyn  Gpt
   --------  -------  -----  -----  ---  ---
   Disk 0    Online   238 GB    0 B   *
   Disk 1    Online  3822 MB    0 B

4. Prepares the memory to be bootable in FAT32 (replace “1” with the correct disk number):

   select disk 1
   clean
   create partition primary
   select partition 1
   active
   format fs=fat32 quick
   assign
   exit

5. Copy the entire contents of the Windows 11 IoT Enterprise ISO/DVD to the root of the USB drive.. You can do this with File Explorer or the command line. commands.

Install Windows 11 IoT Enterprise on the device and boot into audit mode

During installation it is recommended not to connect the device to any network, to prevent the deferred activation state from being altered or unplanned changes from being applied.

Boot the device from the USB

1. With the IoT device powered off, connect the installation USB stick that you prepared in the technical team.
2. Turn on the device and access the boot menu (refer to the manufacturer's documentation for the appropriate key or button combination).
3. Select the USB flash drive as the boot device and let the Windows Setup Wizard start.

Installation with the Windows wizard

1. Set language, time/currency format, and keyboard layout according to your environment and continue.
2. Click “Install now” when the main installer screen appears.
3. Upon activation, enter a valid key or select "I don't have a product key." if you are going to activate it later or with volume/OEM licensing.
4. Accept the license terms after reviewing them carefully.
5. Choose “Custom: Install Windows only” to perform a clean install on the reference device.
6. If partitions exist, delete them to leave the disk as unallocated space., create the destination and continue with the clean install.
7. Let the device complete the reboots until you reach the initial experience (OOBE) with a message like “Let’s get started with the region.”

Enter Audit Mode

1. On the first OOBE screen, press CTRL + SHIFT + F3 so that the system reboots directly into audit mode.
2. Upon startup, you will see the Sysprep tool. (System Preparation Tool); close it with "Cancel" to work in audit mode.
3. While in audit mode, Sysprep will appear on every rebootLater, when you're finished customizing, you'll run Sysprep to seal the image and exit audit mode.

Device security and hardening

Windows 11 IoT Enterprise incorporates the Windows Security app, which centralizes antivirus protection, firewall, account protection, and more, from an interface that's understandable even for field teams.

Security baselines provide sets of recommended configurations ready to be applied., speeding up startup without having to review thousands of parameters one by one. They're an excellent starting point for standardizing your images.

Microsoft Defender Antivirus comes integrated and, combined with Microsoft Defender for Endpoint, allows you to take endpoint protection, detection, and response to the next level. If you manage with Intune, you can create policies based on threat level and compliance criteria.

In application security, the system provides measures to block unwanted execution, isolate content of dubious origin (browsing and documents), mitigate phishing and malware, and implement checklists that fit like a glove on a fixed-function device.

Known administration processes and service

If you already had processes for Windows 10 IoT Enterprise, you don't have to reinvent the wheel.: The same tools are used to deploy, manage, and secure Windows 11 IoT Enterprise, including monthly quality updates to keep your fleet up to date.

For planning the move to Windows 11, rely on planning and deployment documentation, validate requirements, and use pilot rings to reduce risk before deploying to production.

Next steps

After installing the base image on the reference device, it is time to customize it in audit mode.: install drivers, configure session locking, apply policies, incorporate MSIX applications, set Edge to kiosk mode or IE Mode if applicable, and finally seal with Sysprep to capture and replicate the image to your fleet.

This tour of Windows 11 IoT Enterprise and its LTSC variant demonstrates that it combines the strength of the Windows ecosystem with mature deployment and security tools., while providing a clear path to upgrade from Windows 10 IoT, controlling the lifecycle on an annual basis, and keeping embedded and fixed-purpose devices running like clockwork.