With the upcoming Windows 10 end of support, Microsoft published a detailed guide on ways to troubleshoot and fix upgrade bugs. It highlighted how admins can use Intune to manage enterprise Windows upgrades from Windows 10 to 11.
If you weren"t already convinced, Microsoft reiterated a day later how Autopatch was the safest way to do so after explaining why updates would no longer require reboots. Similarly OOBE updates are also getting a makeover starting with KB5065848, KB5065847, and KB5065813.
Aside from those, Microsoft this week has revealed that it is working on new Windows Quality Update management policies which are set to release in early 2026. The company has not revealed a ton of details about it except that they apply in the case of non-security preview releases and out of band updates. The tech giant plans to preview the release in January 2026 with the general availability planned for in February 2026.
Here is how the feature is described in its new Microsoft 365 roadmap entry:
Microsoft Intune: Windows Quality Update management policies
Manage individual Windows quality updates including non-Security and out of band updates. Choose which update types to automatically approve and the rollout options for those approvals.
You can find the entry here under ID 501449 on the official Microsoft 365 roadmap.
For those wondering how Windows Update configuration policies work on Intune, Microsoft offers four policy types as a means to manage updates. They are for update rings, feature updates, quality updates (which applies in this case), and driver updates.
Update rings define when devices install updates, with options to defer quality updates by up to 30 days and feature updates by up to 365 days. Admins can also allow or block driver updates and set uninstall periods for feature releases.
Feature updates policies let IT teams lock devices to a specific Windows version, like say Windows 11 25H2, until the policy changes. This approach keeps the feature set stable while still permitting security and quality updates. Systems already on a newer version remain unchanged unless targeted for rollback within the configured uninstall window.
Quality updates policies can expedite or push the latest security fixes early without altering existing servicing and deployment schedules. This can be used to address critical vulnerabilities more quickly.
Finally, driver update policies let admins review, approve or pause the deployments of driver updates. Similar to the other updates, this is crucial to determine the best, most compatible drivers are given the green signal.