Starting in September 2025, a significant shift will occur for users of Windows 11 (22H2 or later) devices. These devices will have the capability to install quality updates during the Out of the Box Experience (OOBE) by default. This enhancement is poised to streamline the update process for administrators, making it simpler to ensure devices are up to date right from the moment they are set up.
Key Features of the Update Process
- Users will no longer need to apply Windows updates after first signing in.
- By updating during the OOBE, PCs are protected from day one.
- The change applies to Microsoft Entra joined and hybrid joined devices.
This new feature is specifically designed for devices operating on Windows 11 Pro, Enterprise, Education, or SE, and it requires companies to utilize Microsoft Intune for managing Windows quality updates. Furthermore, the OOBE updating experience will only be accessible to those who have implemented the August 2025 OOBE zero-day patch or have devices imaged with the June 2025 Windows non-security update.
With this proactive approach, organizations can distribute devices to employees equipped with the latest security and quality updates, thereby enhancing security and compliance from day one. This not only alleviates the burden on employees but also lightens the load for IT teams following device handouts.
This transition marks a notable improvement from the previous model, where end users were required to perform updates after receiving their devices. As more companies migrate to Windows 11 in anticipation of the Windows 10 end of support set for October 2025, this enhancement is timely. Canalys Research Manager Kieren Jessop noted that the current commercial refresh cycle is generating essential momentum for the PC market, even as consumers exhibit a more cautious approach.
