Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment

Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment

Written By Anoop C Nair
Last Updated March 17, 2026
Posted In Intune
SHARE

Key Takeaways

  • Microsoft introduced a feature to install Windows quality updates during OOBE.
  • The feature can be enabled using ESP profiles in Intune.
  • Users can reach the desktop with latest updates already installed.
  • It helps reduce the update workload after device deployment.

In this post we are discussing Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment. Microsoft has newly introduced a feature that allows Windows quality updates to be installed during the Out-of-Box Experience (OOBE). This feature helps organizations ensure that new devices receive the latest updates while they are still being set up, instead of installing them after the user reaches the desktop.

Table of Contents

Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment

With this improvement, users can land on their desktop with the latest Windows updates already installed. This reduces the time spent installing updates after deployment and helps provide a smoother and faster device setup experience for employees. The feature can be enabled using Enrollment Status Page (ESP) profiles in Microsoft Intune. It is mainly designed to reduce common deployment pain points and ensure devices start with the latest security updates from day one.

What This Feature Does

This feature allows organizations to install Windows quality updates during the device setup process. Instead of waiting until the user signs in and then running updates, the system installs them during the OOBE setup stage.
As a result, users do not need to spend extra time installing updates after reaching the desktop. This improves productivity and makes the first-time device experience smoother.

Windows 11 OOBE journey

Windows 11 OOBE journey the steps a user goes through while setting up a new Windows device. The process starts with basic setup steps such as choosing the language, region, keyboard layout, and connecting the device to a network. After that, the device may install the OOBE Zero Day Package, accept license terms, and complete device naming.

Patch My PC

The next part of the journey focuses on identity, privacy, and security. During this stage, users sign in to their account, and the device begins applying organization policies through Microsoft Intune Autopilot and the Enrollment Status Page (ESP). Privacy settings are also configured as part of this process.

When is restore shownRestore is shown if
During OOBE
Restore is enabled

During First Sign-in		User has at least one PC
backup
The user has not seen
restore on this device
Available on Windows 11 and
when minimal OS version is
met
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Table.1
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Fig.1 Creds to MS
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Fig.1 Creds to MS

Windows Updates During OOBE Landing Page

During the OOBE setup, users may see a landing page that appears when Windows updates are being installed. This page informs users that their update is in progress and that the system is handling the process automatically. While waiting, users can also explore information about new PC features through the “See more” option.

  • The page sets expectations by indicating that the update may take some time and asks users to keep the device turned on and plugged in.
  • A progress bar is displayed to show the current stage of the update, such as downloading or installing updates, helping users understand what is happening while the device prepares the latest updates before they reach their first sign-in experience.
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Fig.2 Creds to MS
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Fig.2 Creds to MS

Admin Control for Enabling Quality Updates in OOBE

Administrators can control whether Windows quality updates are installed during the OOBE by configuring settings in the Enrollment Status Page profile within Microsoft Intune. In the ESP profile settings, admins can enable the Install Windows quality updates option so that devices receive the latest approved updates during the setup process, even if it requires a restart.

By default, existing ESP profiles keep this feature disabled, while new ESP profiles have it enabled by default and can be adjusted during profile creation. If an organization does not use ESP profiles, the policy remains disabled unless configured.

  • Additionally, the same configuration can be managed through Group Policy under Computer Configuration > Administrative Templates > Windows Components > OOBE > Allow Updates in OOBE.
  • This ensures that devices are updated and ready for users when they complete the setup process.
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Fig.3 Creds to MS
Microsoft Adds Windows Quality Updates During OOBE for Faster Device Deployment-Fig.3 Creds to MS

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community  and the Whatsapp channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair is a Workplace Technology solution architect with 25+ years of experience. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He is a blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, and Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Entra, and Microsoft Security

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read