MS Ai Insider

Microsoft Enhances Windows OOBE with Automatic Quality Updates for MDM Devices: A Security Boost

Posted by

ailona

–

September 16, 2024

Microsoft is enhancing the Windows enrollment experience by enabling automatic quality updates during the out-of-box experience (OOBE) for MDM-enrolled devices. This change, effective with the October update, ensures devices are fully patched before user login, improving security and reliability. Users should prepare for potentially longer setup times.2. **HTML **:

Exciting Changes to Windows Enrollment Experience

Microsoft is set to enhance the Windows enrollment experience, making it more efficient and secure. This change addresses a top customer request: enabling Windows updates during provisioning in the out-of-box experience (OOBE).

What’s New?

In the upcoming October Windows update, devices enrolled with Mobile Device Management (MDM) will automatically download and install quality updates during OOBE. This applies to all Windows 11, version 22H2 and higher devices, regardless of pre-registration with Windows Autopilot.

“Quality updates are critical for the performance and security of your devices.”

Now, when a device connects to the internet, it will check for updates. If available, a message will indicate that updates are being installed. This ensures devices are fully patched before users log in.

Major Updates to Expect

The new enrollment experience will streamline the setup process. Quality updates will install in the background, providing a smoother transition to the desktop. However, it is crucial to note that feature updates and driver updates will not be applied during OOBE.

Impacts and Considerations

While these changes promise enhanced security, they may also extend the OOBE duration. The time added depends on the last update, internet speed, and device performance. Organizations should plan for this additional setup time accordingly.

For those using Temporary Access Pass (TAP), it’s advisable to extend the validity period of temporary passwords. This ensures users can log in without issues, especially if the setup takes longer than expected.

“We believe that this change will improve the Windows enrollment experience.”

What’s Important to Know

There’s currently no option to disable quality updates during OOBE. Microsoft is exploring ways to manage all monthly quality updates during this phase. This will further enhance the overall experience for users.

In conclusion, these updates are designed to improve security and reliability for your devices. Feedback from the community will play a vital role in shaping future enhancements. Stay tuned for more updates from Microsoft!

“`

Automatic quality updates will be enabled during the OOBE for MDM-enrolled devices.

Updates will install before the user reaches the desktop, enhancing security.

Feature and driver updates will still be managed by MDM policies, not during OOBE.

Additional setup time may be required depending on update status and internet speed.

Organizations should consider extending temporary password validity due to longer setup times.

“`

From the Intune Customer Success articles