Starting in September 2025, Windows 11's Out-of-Box Experience (OOBE) will automatically install quality updates by default for managed Entra/Entra hybrid PCs. This feature applies only to Windows 11 version 22H2 or later devices enrolled via Intune and Autopilot Enrollment Status Page (ESP). The updates during OOBE will provide the latest security fixes before the first sign-in, reducing the need for post-setup patches. Devices must meet specific criteria, including being managed through Microsoft Intune and having an assigned ESP profile. The setting can be enabled in the Microsoft Intune admin center, with existing profiles defaulting to "No" and new profiles set to "Yes."