Microsoft is rolling a significant change to how new Windows 11 PCs are provisioned: eligible devices will now check for and install the latest quality and security updates during the out-of-box experience (OOBE) so users sign in on day one with a patched, compliant system. This shift, delivered...
22h2
autopilot
azure ad
bandwidth
delivery optimization
deployment
device imaging
device provisioning
education
enrollment status page
enterprise
enterprise deployment
enterprise it
entra
entra hybrid joined
esp
esp-toggle
first sign-in
fleet management
intune
it admin
mdm
microsoft entra
oobe
patch management
provisioning
quality updates
rollout
security hardening
security updates
tap
vendorimaging
windows
windows 11
windows update
windows update for business
windows update rings
zero trust
zero-day updates
Microsoft has quietly shifted a major piece of device provisioning from a manual follow-up task for end users to an automated, admin‑controlled step in setup — beginning with the September 2025 Windows security update, eligible Windows 11 devices can check for and install quality updates during...
autopilot
device provisioning
enrollment status page
enterprise it
entra
esp
firmware
imaging
intune
mdm
oobe
quality updates
security updates
tap
vendorimaging
windows 11
windows update for business
zero-touch provisioning
