As organizations embrace cloud-native management, upgrading Windows devices to Windows 11 is a strategic move that enhances security, performance, and compatibility with modern tools like Copilot. Intune provides a streamlined way to manage this upgrade process.

Prerequisites for Upgrading to Windows 11 with Intune

These prerequisites are for Windows 10 devices that are already hybrid domain joined and enrolled in Intune. Before initiating the upgrade, ensure the following:

1. Verify hardware compatibility*: Confirm that devices meet the Windows 11 requirements (TPM 2.0, Secure Boot, CPU, RAM, storage) using Microsoft Configuration Manager or Endpoint analytics in Microsoft Intune.
2. Update Windows 10 devices: To facilitate a smooth upgrade to Windows 11, first check that all your Windows 10 devices are on the latest supported release (Windows 10, version 22H2) and have all updates installed.
3. Confirm Synchronize identities: Ensure users and Windows devices are synchronized from Active Directory to Microsoft Entra ID.
4. Review current Windows update ring: You need to confirm that the deferral and the deadline for feature updates are set for when you want the Windows 11 feature update to be available to end users, and the deadline is set to when you want to force the Windows 11 feature update to be installed.

*NOTE: If you have a Windows 10 device that does not meet the hardware requirements, you can “bypass” the requirements and install Windows 11 anyway. Keep in mind, this is not supported by Microsoft, so use it at your own risk. One way to bypass the hardware requirements is to make some edits in the registry.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\PCHC]

"UpgradeEligibility"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup]

"AllowUpgradesWithUnsupportedTPMOrCPU"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig]

"BypassRAMCheck"=dword:00000001

"BypassSecureBootCheck"=dword:00000001

"BypassTPMCheck"=dword:00000001

Step-by-Step Upgrade Process

1. Create an Entra ID Device Group

Group your eligible Windows 11 devices using a device group in Entra ID. This allows targeted policy deployment.

2. Create a Feature Update Policy in Intune

Use Intune to create a Windows 11 upgrade policy:

• Go to Intune → Devices → Windows Updates → Feature Updates (on top of the screen)
• Click + Create Profile.
• Name the policy and select Windows 11 and your desired version as the feature update.
• Select to make update required or optional.
• Select to make update available as soon as possible, on a specific date, or available gradually.
• Assign the policy to your Entra ID device group.

3. Monitor Upgrade Readiness

Use Windows Update reports from Reports in Intune to check upgrade eligibility and device health.

Best Practices

• Use phased deployment with Windows Update rings to minimize disruption.
• Monitor progress using Windows Update reports in Intune.

Reporting & Validation

Use Windows Feature Update reports under Reports → Windows Update in Intune.

Final Thoughts

Upgrading Windows devices to Windows 11 via Intune is not just about OS modernization—it’s about aligning with a cloud-first strategy. With proper planning, dynamic grouping, and feature update policies, you can ensure a smooth and scalable transition.

If you are looking to upgrade your Windows 365 Cloud PC to Windows 11, refer to the following blog post: Upgrading Windows 365 Cloud PCs from Windows 10 to Windows 11 with Intune – Big Chris’s Cloud PC Chronicles