Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot

How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot

Written By Anoop C Nair
Last Updated February 12, 2026
Posted In Intune
SHARE

Key Takeaways

  • Improves Device Security Updates During OOBE using ESP
  • Windows can now install monthly security (quality) updates during OOBE when using Autopilot and Intune.
  • Microsoft added a new setting in the Intune Enrollment Status Page to control this behavior.
  • Existing profiles must be updated manually.

Let’s discuss How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot. Microsoft has introduced a new control in Microsoft Intune that changes how Windows devices receive security updates during their first setup. While Windows has always aimed to keep devices secure during the out-of-box experience (OOBE).

Table of Contents

How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot

IT admins can now choose whether monthly security updates should install automatically during setup. By default, Windows installs the latest monthly security updates during OOBE, so devices are protected and up to date before users start working. In Microsoft Intune and Windows Autopilot, this setup happens through the Enrollment Status Page.

See More: Install Required Apps in Windows Autopilot Enrollment Status Page

How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot -Fig.1
How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot -Fig.1

New Feature in Intune ESP

The new feature added by Microsoft that allows Windows to install security (quality) updates during the out-of-box experience (OOBE) when devices are set up using Intune and Windows Autopilot. You know this capability became available starting with the January 2026 Windows quality update.

Patch My PC
  • A new setting has been added to the Intune Enrollment Status Page called “Install Windows updates (might restart the device).
  • It helps admins decide whether these updates should be installed during device setup or delayed until later.
  • Preexisting ESP profiles will have the option Install Windows quality updates set to “No” by default, meaning devices won’t automatically apply updates during provisioning unless admins manually edit the profile.
  • New ESP profiles created now will default to Yes, ensuring devices install the latest quality updates during the out‑of‑box experience (OOBE).
What Happens When It Enabled or DisabledInfo
EnableIf it is Enabled (Yes), the device installs the latest security updates during setup, which may include restart.
DisableIf it is Disabled (No) Updates are skipped during OOBE
How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot -Table.1
How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot -Fig.2
How to Install Windows Security Updates During OOBE using ESP with Intune and Autopilot -Fig.2

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community  and WhatsApp Channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM,  Windows,  Cloud PC,  Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read