Upgrading from Windows 10 to Windows 11 has become a must-do, especially with Windows 10 reaching its end-of-life on October 14, 2025. This means businesses have a shrinking window to ensure their fleet is secure, efficient, and equipped with the latest tools.

For companies already using Intune, the upgrade is less painful than you might think. Here’s how Intune can make the transition smooth and efficient, keeping your devices up-to-date and secure as you move to Windows 11.

Why Upgrade to Windows 11?

Windows 11 introduces a significant leap forward in terms of security, productivity, and usability. The updated operating system offers:

  • Enhanced security: Windows 11 adds multiple layers of security, leveraging the latest advancements in protection and system integrity.

  • Productivity boosts: AI-powered tools, improved snap layouts, and an upgraded file explorer make multitasking and management simple.

  • Advanced features: The new screen recording function and refined user interface streamline daily operations, saving time and reducing frustration.

With cyber threats becoming more sophisticated, a secure OS is non-negotiable and moving to Windows 11 positions your business to stay protected.

Migrate to Windows 11

Here are the 3 recommended high-level steps for a successful migration to Windows 11: 

  • 1

    Set-up Intune as the future platform with cloud native / modern management 

  • 2

    Perform in-place upgrades of all compatible Windows 10 machines 

  • 3

    Replace all incompatible Windows 10 devices, or use Windows 365, or pay for ESU 

Why Use Intune for Your Windows 11 Upgrade?

If you’re already managing devices with Intune, transitioning from Windows 10 to Windows 11 is a more straightforward than you might expect. Intune offers an end-to-end management platform, allowing you to automate, monitor, and fine-tune the upgrade process without the hassle of a hands-on approach.

If you’re still using traditional update tools like WSUS (Windows Server Update Services), now is an ideal time to make the switch as Microsoft recently announced the deprecation of Windows Server Update Services.

Intune enables:

  • Automated update deployment: Roll out Windows 11 to all compatible devices or in batches, based on your business needs.

  • Detailed device readiness insights: Intune’s endpoint analytics will flag any issues preventing a device from upgrading, whether due to RAM, storage, TPM, or OS version.

  • Central management: Easily manage, update, and troubleshoot devices from a single platform, reducing time and effort for IT teams.

Migrating to Windows 11 with Intune

  1. Set up Intune 

Intune is a huge platform with over 10,000 settings and many integrations to other parts of the Microsoft 365 ecosystem;, however, we have compiled a list of 10 steps to success.
 

  1. Deploy Intune with a best practice set of security policies, profiles, compliance rules 
  2. Configure Conditional Access policies and self-service password reset in Entra ID   
  3. Integrate Autopilot with a preferred hardware vendor and validate new provisioning process 
  4. Create dynamic assignment groups to deploy applications and OneDrive content  
  5. Configure BitLocker, certificates, EDR agent(s) and Endpoint Privilege Management 
  6. Configure Edge browser settings in Intune for extensions, password blocking and TLS 
  7. Configure Autopatch with deployment rings for OS, firmware, driver and O365 updates  
  8. Setup a tool for 3rd party application patching (e.g. Microsoft EAM, or PatchMyPC) 
  9. Setup Company Portal, Endpoint Analytics and Remote Help tools 
  10. Create a profile for Windows 365 cloud PC (for unmanaged devices and frontline workers) 

2. In-place Upgrades for Windows 10 to 11

Here’s a checklist to help you perform in-place upgrades of all compatible Windows 10 machines:

Pre-Upgrade Preparation

  1. Backup Data: Ensure all important data is backed up (synchronized) to OneDrive / SharePoint.
  2. Check Hardware Compatibility: Verify that all existing hardware models are compatible with Windows 11 (8th Gen processor, TPM 2.0 and a Secure Core Profile) Budget will need to be assigned for hardware upgrades in the first half of 2025..
  3. Verify Application Compatibility: Test line of business applications to ensure they work as expected on Windows 11. Applications in compatibility mode with Edge or other browsers will be available until 2029. Applications that rely on IE will not be supported.
  4. Refactor Policies: Update security policies to leverage new features in Windows 11 and deprecate features from Windows 10. Some security features that were optional in Windows 10 are now set as the default in Windows 11.
  5. Update Drivers: Ensure all device drivers are up-to-date.
  6. Free Disk Space: Ensure there is sufficient disk space for the upgrade (at least 20 GB for 64-bit systems).
  7. Disable Security Software: Temporarily disable third-party antivirus and security software to prevent conflicts.
  8. Draft Comms: Brief users in advance as the look, feel, navigation and functionality is different. There are some useful resources in Windows 11 itself, as well as on LinkedIn and YouTube.
  9. Develop Support Resources: Prepare knowledge base articles and FAQs for the upgrade.
  10. Train the Service Desk: Equip desktop technicians with the tools and knowledge to resolve end user issues promptly.

Upgrade Process 

  1. Download Media Creation Tool: Obtain the Windows 11 Media Creation Tool from the official Microsoft website and create a Win32 App Package to deploy via Intune 
  2. Run the Tool: Launch the Media Creation Tool and select “Upgrade this PC now.” 
  3. Follow Prompts: Follow the on-screen instructions to complete the upgrade process. 
  4. Monitor Progress: Keep an eye on the upgrade process to address any prompts or issues that arise.

Post-Upgrade Tasks 

  1. Re-enable Security Software: Turn on any antivirus or security software that was disabled. 
  2. Check for Updates: Run Windows Update to ensure all the latest updates and patches are installed. 
  3. Verify Applications: Ensure all applications are functioning correctly and update them if necessary. 
  4. Restore Data: Restore any backed-up data if needed. 
  5. Check System Settings: Verify system settings and configurations to ensure they are as expected. 

Additional Recommendations 

  • Battery and Network Checks: Ensure the device is plugged in and connected to a stable network. 
  • Remove Incompatible Applications: Uninstall any applications that are known to be incompatible with the new Windows version. 
  • Driver and Firmware Updates: Check for any additional driver or firmware updates post-upgrade12. 

Looking Forward with Windows 11

Upgrading to Windows 11 isn’t just about keeping devices supported; it’s about equipping your team with a future-proof operating system that’s built for the modern workplace. With the added productivity features and security that Windows 11 provides, your business will be ready to tackle security and productivity effectively.

Discover How much value are your business is getting from your M365 licenses compared to your peers.

Discover:

  • Overlapping security tools can you retire

  • Business processes can you automate

  • IT functions can you modernize

Apply for the Capability & Capacity Assessment 

Andrew Reade

ANDREW READE

Andrew is our Digital Marketing Manager and oversees web-based marketing strategies and content creation for the organization. As a marketing veteran, Andrew has worked with organizations of all sizes in a diverse group of industries, from Risk Management to Transportation. Joining the organization in 2021, Andrew is based in Mobile Mentor’s Nashville, TN office.