
Microsoft Introduces Enhanced Update Controls for Commercial Windows Users
Recently, Microsoft provided a comprehensive overview of the updates available to Windows Insiders, encompassing various categories such as feature improvements, quality enhancements, driver updates, security patches, and servicing adjustments. In a significant development for enterprise users, Microsoft has now announced that it will enable businesses to manage one specific category of these updates directly during the out-of-the-box experience (OOBE).
Quality Update Control for Enterprise Customers
This new feature allows IT administrators to dictate whether quality updates should be implemented during the OOBE phase for Windows devices. Quality updates serve to boost the overall performance and stability of the operating system by addressing bugs and other technical issues.
Prerequisites for OOBE Quality Update Management
To leverage this functionality, the device in question must meet several criteria:
- It should be operating on Windows 11, version 22H2 or later, specifically within Enterprise, Pro, Education, or SE WeU categories.
- The device must be Entra-joined or Entra hybrid-joined and configured through Microsoft Intune.
- A Windows Autopilot Enrollment Status Page (ESP) profile must be established.
- Additionally, the device must have received the August 2025 OOBE zero-day patch or be set up with at least the June 2025 Windows non-security update.
Configuring Quality Updates in Intune
IT admins can customize the installation process of quality updates via the Intune admin center by navigating to Devices > Enrollment > Enrollment Status Page. Within the appropriate ESP profile, administrators should set the Install Windows quality updates (might restart the device) option to Yes. It’s important to note that existing ESP profiles will default to No for this setting, while newly created profiles will start with it enabled.

Advantages of OOBE Quality Updates
This streamlined process ensures that by the time a user registers their login credentials for the first time, all critical quality updates are pre-installed, effectively minimizing initial setup time and enhancing user experience.
Support Beyond Microsoft Solutions
While the documentation is primarily tailored for Microsoft Intune users, it is noteworthy that other mobile device management (MDM) solutions that support ESP profiles may also integrate this new capability. For further insights, particularly for IT administrators looking to automatically install the quality updates from September 2025 during the OOBE, more information can be accessed here.
Leave a Reply