Upgrade to Windows 11 using Feature Updates in Intune

Today marks the General Availability of Windows 11. Along with this there is an update to the Feature updates for Windows 10 and later (Preview) feature in Intune to assist with upgrading Intune managed devices to Window 11.

I have previously used the Feature Updates feature to control deployment of Feature Updates outside of my Windows Insider for Business channels

Before I get into how I have configured this for Windows 11, it may be useful to see how I have done this previously for Windows 10.

Below I have two Feature Update profiles.  Win 10 – Feature Updates Deployment – Production and Win 10 – Feature Updates Deployment – vNext.

The Feature Update profile Win 10 – Feature Updates Deployment – vNext is assigned to an Azure AD group which I place device objects into and these devices will upgrade to the Windows 10 version configured in the Feature Update profile. In the case below this is Windows 10 version 21H1.

The feature Update profile Win 10 – Feature Updates Deployment – Production is assigned to an Azure AD group which I use a lot in my tenant, this group is a Dynamic Device group containing all of my managed Windows devices.  I also exclude the Azure AD group containing the devices assigned to the Win 10 – Feature Updates Deployment – vNext Feature Update profile

There are a few limitations when using Feature Update Profiles which Microsoft have documented here. One tip to take special note of is if you have configured deferrals in Update Rings, these should be change to 0 days

Windows 11

To create a Feature Update profile to control the rollout of Windows 11 using Intune, I followed the principals used with the Win 10 – Feature Updates Deployment – vNext Feature Update profile

To start, I need to create an Azure AD Security group

NameDevice – Win 11 – Feature Update Windows 11
DescriptionDevices being upgraded to Windows 11

The next step is to create a new Feature Update profile

NameWin 11 – Feature Updates Deployment – Production
DescriptionSets the feature update version of Windows 11
Feature Update to DeployWindows 11

Assign the Azure AD group Device – Win 11 – Feature Update Windows 11 created earlier to the Feature Update profile

Similar to the Win 10 – Feature Updates Deployment – vNext Feature Update profile, the Azure AD group Device – Win 11 – Feature Update Windows 11 needs to be excluded from the Feature Update profile Win 10 – Feature Updates Deployment – Production.

The final step is to add a device to the Azure AD group Device – Win 11 – Feature Update Windows 11

Log on to the targeted device and Check for Updates. Windows 11 should start downloading and the upgrade will commence.

Once all devices have been moved to Windows 11, I plan to modify the Win 11 – Feature Update Deployment – Production profile to use the Azure AD group previously used for the Feature Update Profile Win 10 – Feature Update Deployment – Production, while at the same time removing that Azure AD group from the profile Win 10 – Feature Update Deployment – Production and schedule it for retirement.

I will also rename the Win 10 – Feature Update Deployment – vNext profile to Win 11 – Feature Update Deployment – vNext and continue using it like I have been in the past with Windows 10

P.

2 Comments

  1. Do you have to hit each device and run windows updates, or is there a way to start it from Intune? Trying to manage this as hands off as possible, I know it’s a big ask for an OS upgrade. Thanks!

    Like

    1. Hi Dan, The devices should automatically upgrade the next time Windows Update checks in (be it during the random time each day by the system or if the user clicks check for updates).

      Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s