Get ready for Windows quality updates out of the box

Starting in September 2025, the latest Windows quality updates will be available by default during the out-of-box experience (OOBE). With Windows Autopilot and Microsoft Intune, you can manage this capability with a policy setting for eligible Microsoft Entra joined or Microsoft Entra hybrid joined devices running Windows 11, version 22H2 or higher.    When will this happen:   This experience will be available starting with the September 2025 Windows security update. Note: When Windows quality update support is available in the Windows Autopilot Enrollment Status Page (ESP) at the end of August 2025, you’ll see the new quality update setting enabled by default.   How this will affect your organization:  This new capability has several key benefits for your organization: the latest quality updates are already applied out of the box, security is enhanced from day 1, and post-deployment update overhead is reduced.     What you need to do to prepare:  If you want to manage this experience, ensure your organization has eligible Microsoft Entra joined or Microsoft Entra hybrid joined devices and that those devices meet criteria for Windows 11 versions, are managed using Intune, and have the required updates. Additionally, you’ll need to:    Assign a Windows Autopilot Enrollment Status Page (ESP) profile to devices.  Confirm or edit new settings in Intune to ensure updates can be installed during provisioning.  Assign Windows Update rings profile to ensure the OOBE respects pause and deferral settings.    Note: If any non-Microsoft management solutions are used at your organization, you need to confirm they are capable of using the ESP functionality.     Additional information:  Review the step-by-step instructions to Get ready for Windows quality updates out of the box.  Learn more about the Windows Autopilot Enrollment Status Page (ESP).  Read the preannouncement.