Windows 11 OOBE update installs start September 2025
Starting September 2025, Microsoft will implement a change in how Windows 11 devices are set up for enterprise and education customers. Eligible users will receive the latest Windows quality updates during the out-of-box experience (OOBE), streamlining the initial setup process.
The primary objective of this adjustment is to enhance security and stability from the outset. The installation of quality updates during OOBE aims to reduce the number of updates needed post-deployment, ensuring devices are promptly secured with the latest bug fixes and improvements.
The process will unfold on the final page of the OOBE. The device will initiate a check for available Windows Updates and proceed to install any quality updates it finds. This ensures the system is patched before the user’s initial login. Microsoft stated that this allows for “seamless control over quality update behavior during provisioning, while ensuring alignment with organizational security and compliance requirements.”
This modification will not extend to unmanaged consumer devices. It will specifically affect Microsoft Entra-joined or hybrid-joined PCs operating on Windows 11 version 22H2 or later. These PCs must also be managed through Intune or other supported mobile device management (MDM) solutions with an Autopilot Enrollment Status Page (ESP) profile for the new update process to take effect.
IT administrators retain control over the update process through the Intune admin center. They can navigate to Devices | Enrollment | Enrollment Status Page and adjust the “Install Windows Quality Updates (Might Restart The Device)” setting to manage the installation of these updates during OOBE.
By default, new ESP profiles will have this option enabled. Conversely, existing profiles will retain their current setting of “No” until administrators manually adjust the configuration. This allows IT departments to control the rollout of the new feature and assess its impact on their existing workflows.
Devices lacking an assigned ESP profile will automatically install the updates, a process that cannot be disabled. This could affect organizations reliant on Autopilot device preparation policies, as the updates will be enforced by default in these scenarios.
The update process will also respect any configured pause and deferral rules, provided these settings are properly configured in Update Rings and assigned to the same group as the ESP profile. Microsoft has indicated that inconsistent application of settings may occur without this alignment.
For IT teams, this shift reduces the workload associated with patching devices immediately after deployment and helps ensure systems are compliant from the start. However, users may experience a longer setup time. Reports suggest the OOBE process could extend by up to 20 minutes.
At Black Hat 2025, Microsoft also discussed its security teams’ efforts to proactively address cyber threats and preempt attacks.
Featured image credit
FAQs
Frequently Asked Questions
What is a Premium Domain Name? A premium domain name is the digital equivalent of prime real estate. It’s a short, catchy, and highly desirable web address that can significantly boost your brand's impact. These exclusive domains are already owned but available for purchase, offering you a shortcut to a powerful online presence. Why Choose a Premium Domain? Instant Brand Boost: Premium domains are like instant credibility boosters. They command attention, inspire trust, and make your business look established from day one. Memorable and Magnetic: Short, sweet, and unforgettable - these domains stick in people's minds. This means more visitors, better recall, and ultimately, more business. Outshine the Competition: In a crowded digital world, a premium domain is your secret weapon. Stand out, get noticed, and leave a lasting impression. Smart Investment: Premium domains often appreciate in value, just like a well-chosen piece of property. Own a piece of the digital world that could pay dividends. What Sets Premium Domains Apart? Unlike ordinary domain names, premium domains are carefully crafted to be exceptional. They are shorter, more memorable, and often include valuable keywords. Plus, they often come with a built-in advantage: established online presence and search engine visibility. How Much Does a Premium Domain Cost? The price tag for a premium domain depends on its desirability. While they cost more than standard domains, the investment can be game-changing. Think of it as an upfront cost for a long-term return. BrandBucket offers transparent pricing, so you know exactly what you're getting. Premium Domains: Worth the Investment? Absolutely! A premium domain is more than just a website address; it's a strategic asset. By choosing the right premium domain, you're investing in your brand's future and setting yourself up for long-term success. What Are the Costs Associated with a Premium Domain? While the initial purchase price of a premium domain is typically higher than a standard domain, the annual renewal fees are usually the same. Additionally, you may incur transfer fees if you decide to sell or move the domain to a different registrar. Can I Negotiate the Price of a Premium Domain?
In some cases, it may be possible to negotiate the price of a premium domain. However, the success of negotiations depends on factors such as the domain's demand, the seller's willingness to negotiate, and the overall market conditions. At BrandBucket, we offer transparent, upfront pricing, but if you see a name that you like and wish to discuss price, please reach out to our sales team.
How Do I Transfer a Premium Domain?
Transferring a premium domain involves a few steps, including unlocking the domain, obtaining an authorization code from the current registrar, and initiating the transfer with the new registrar. Many domain name marketplaces, including BrandBucket, offer assistance with the transfer process.
